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Preliminary Amendment filed 
concurrently w/application 

IN THE SPECIFICATION 

Page 3, lines 1-8, please amend the paragraph as follows: 

The reason why the rewritable flash memory 908 is used as a storage medium is that it 
is necessary to respond to a program change made by the communication common carrier, 
e.g., a change into a program for a new communication system. Further, the use of an a non- 
rewritable mask ROM not only disables the program change but also needs to use different 
mask patterns corresponding to the identification numbers which are different from one 
device to another in the manufacturing process of the mask ROM to record the identification 
numbers, causing deterioration of manufacturing efficiency and an increase in manufacturing 
cost. 
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TITLE OF THE INVENTION 

Semiconductor Device, Terminal Device and Communication Method 



BACKGROUND OF THE INVENTION 
5 Field of the Invention 

The present invention relates to a semiconductor device, a terminal device and a 
communication method. 

Description of the Background Art 

10 It is said that a fraudulent use of a terminal device such as a cellular phone, i.e., 

an illegal action of evading the duty of payment on the pretence that a user's own terminal 
device is some other's one in a communication network has recently increased. Though, 
naturally, the fraudulent use should be socially controlled by inflicting some legal 
punishment, it is recognized at the same time that a technical difficulty of fraudulent use, 
15 in other words, a higher technical barrier (security) against the fraudulent use is one of 
especially important countermeasures for preventing the crime. 

Fig. 64 is an illustration cited from an article of "NIKKEI ELECTRONICS", on 
Feb. 8, 1999 (No. 736), pp. 155-162 (document 1), showing an example of the current 
countermeasures for fraud prevention on the cellular phone. As described in the 
20 document 1, the method of Fig. 64 is one with the highest level of security among the 
current countermeasures for fraud prevention, utilizing a procedure of "authentication". 

In this method, an electronic serial number (ESN) of a cellular phone, shared 
secret data (SSD) which are shared by the cellular phone and an authentication center of a 
communication common carrier and a mobile identification number (MIN) are given to 
25 each cellular phone. These identification numbers are encoded into cipher referred to as 
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AUTHREQ on the basis of the CAVE (Cellular Authentication and Voice Encryption) 
algorithm. In the encryption, a random number referred to as RAND outputted from a 
mobile exchange center of the communication common carrier is used. 

The communication common carrier decodes the cipher AUTHREQ transmitted 
5 from the cellular phone on the basis of the CAVE algorithm. The identification number 
obtained by decoding is compared with an identification number including the shared 
secret data (SSD) known only by the authentication center and a judgment on whether the 
communication should be permitted or not is made in accordance with the comparison 
result. Thus, a check on whether the user of the cellular phone is authorized or not, i.e., 
10 an authentication is performed on the basis of the shared secret data (SSD) shared only 
between the cellular phone and the communication common carrier. 

It is said, however, that the illegal action through the fraudulent use eluding this 
authentication system of Fig. 64, which is considered as the current countermeasure for 
fraud prevention with the highest level of security, is prevailing. Further, it is said that 
1 5 one of the technical causes is that the identification number given to the cellular phone is 

written in a flash memory (flash ROM) which is rewritable, as described in the document 

1 . 

Fig. 65 is a block diagram briefly showing an internal constitution of a cellular 
phone. A cellular phone 903 in the background art comprises a flash memory 908 as 
20 well as a communication circuit 907. The communication circuit 907 operates in 
accordance with a program written in the flash memory 908. The identification number 
ID is also stored in the flash memory 908, and the communication circuit 907 performs 
encoding of the identification number ID read out from the flash memory 908 and 
transmits a cipher AUTHREQ obtained by encoding to the communication common 
25 carrier. 
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The reason why the rewritable flash memory 908 is used as a storage medium is 
that it is necessary to respond to a program change made by the communication common 
carrier, e.g., a change into a program for a new communication system. Further, the use 
of an. non-rewritable mask ROM not only disables the program change but also needs to 
5 use different mask patterns corresponding to the identification numbers which are 
different from one device to another in the manufacturing process of the mask ROM to 
record the identification numbers, causing deterioration of manufacturing efficiency and 
an increase in manufacturing cost. 

The application (Japanese Patent Application Laid Open Gazette 2001-007290: 
10 document 2) by the present applicant discloses a technique to solve the above cause, in 
which a semiconductor element having a polycrystalline substance is formed in a 
semiconductor substrate and variation in electric properties caused by variation in crystal 
structures of the polycrystalline substances is used for generation of an identification 
number. 

15 On the other hand, as well as the above type of fraudulent use by rewriting of an 

identification number, known is another type of fraudulent use of terminal device by 
replacing a semiconductor substrate (semiconductor chip) mounted in a terminal device. 
Specifically, the fraudulent use through replacement of a semiconductor substrate in 
which an identification number is recorded with a semiconductor substrate in which 
20 another identification number is recorded so as to evade the duty of payment on the 
pretense that a user’s own terminal device is some other's one has appeared. Further 
known is a crime to make an illegal gain through the fraudulent use through replacement 
of the semiconductor substrate in a general appliance of semiconductor device including a 
game machine for gamble ("pachinko machine" in Japan as a good example) and the like. 
25 Furthermore known is still another type of fraudulent use of a terminal device 
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which is capable of performing radio communication through a communication common 
carrier (i.e., a cellular phone) to evade the duty of payment on the pretense that the 
terminal device has been lost while being used. 

5 SUMMARY OF THE INVENTION 

The present invention is directed to a semiconductor device. According to a 
first aspect of the present invention, the semiconductor device comprises: N (1 ^N) code 
generation unit formed in N semiconductor substrate in one to one correspondence, each 
of the N code generation unit being configured to generate an identification code inherent 
10 in a corresponding semiconductor substrate; and N memory formed in one-to-one 
correspondence to the N identification code, each of the N memory storing a code which 
coincides with a corresponding identification code as a memory code, and each of the N 
memory being formed in other semiconductor substrate than a corresponding 
semiconductor substrate. 

15 According to a second aspect of the present invention, in the semiconductor 

device of the first aspect, each of the N memory comprises an OTPROM storing the 
memory code. 

According to a third aspect of the present invention, in the semiconductor 
device of the first or second aspect, each of the N code generation unit comprises a 
20 semiconductor element; and a coding circuit configured to convert an electric property of 
the semiconductor element into a digital signal so that a value of the digital signal varies 
with variation in the electric property of the semiconductor element to generate the 
identification code and outputting the identification code. 

According to a fourth aspect of the present invention, in the semiconductor 
25 device of the third aspect, the semiconductor element has a polycrystalline substance, and 
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the variation in the electric property of the semiconductor element is caused by variation 
in crystal structure of the polycrystalline substance. 

According to a fifth aspect of the present invention, in the semiconductor device 
of the first or second aspect, each of the N code generation unit comprises an OTPROM 
5 storing the identification code. 

According to a sixth aspect of the present invention, the semiconductor device of 
any one of the first to fifth aspects further comprises: N comparator circuit formed in one- 
to-one correspondence to the N identification code, each of the N comparator circuit 
being configured to compare a corresponding identification code and a corresponding 
10 memory code to thereby judge whether these codes coincide with each other or not and 
outputting an enable signal representing the judgment result. 

According to a seventh aspect of the present invention, in the semiconductor 
device of the sixth aspect, each of the N comparator circuit is formed in the 
semiconductor substrate corresponding to a corresponding identification code to be 
1 5 compared. 

According to an eighth aspect of the present invention, the semiconductor device 
of the seventh aspect further comprises: N key generation unit, N encryption circuit and N 
decoder circuit formed in one-to-one correspondence to the N identification code, each of 
the N key generation unit, each of the N encryption circuit and each of the N decoder 
20 circuit being formed in the semiconductor substrate corresponding to a corresponding 
identification code, and in the semiconductor device of the eighth aspect, each of the N 
key generation unit generates a key for encryption inherent in a corresponding 
semiconductor substrate, each of the N encryption circuit encrypts the identification code 
generated by the code generation unit formed in a corresponding semiconductor substrate 
25 on the basis of a corresponding key and transmits the identification code of encrypted 
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form to the corresponding memory, each of the N memory stores the identification code 
of encrypted form outputted from a corresponding encryption circuit as the memory code 
of encrypted form, each of the N decoder circuit decodes the memory code of encrypted 
form stored in a corresponding memory on the basis of a corresponding key, and each of 
5 the N comparator circuit compares the identification code generated by a corresponding 
code generation unit with the memory code decoded by a corresponding decoder circuit. 

According to a ninth aspect of the present invention, in the semiconductor device 
of the eighth aspect, each of the N key generation unit comprises another semiconductor 
element; another coding circuit for converting an electric property of the another 
10 semiconductor element into another digital signal so that a value of the another digital 
signal varies with variation in the electric property of the another semiconductor element 
to generate the key and outputting the key. 

According to a tenth aspect of the present invention, in the semiconductor device 
of the ninth aspect, the another semiconductor element has another polycrystalline 
1 5 substance, and the variation in the electric property of the another semiconductor element 
is caused by variation in crystal structure of the another polycrystalline substance. 

According to an eleventh aspect of the present invention, in the semiconductor 
device of the eighth aspect, each of the N key generation unit comprises an OTPROM 
storing the key. 

20 According to a twelfth aspect of the present invention, the semiconductor device 

of any one of the seventh to eleventh aspects further comprises N switching circuit 
formed in one-to-one correspondence to the N identification code, each of the N 
switching circuit being formed in the semiconductor substrate corresponding to a 
corresponding identification code, each of the N switching circuit being configured to 
25 exclusively perform a transmission of a corresponding identification code generated by a 




7 



corresponding code generation unit to a corresponding memory and an input of the 
memory code stored in the corresponding memory to a corresponding comparator circuit. 

According to a thirteenth aspect of the present invention, the semiconductor 
device of any one of the sixth to twelfth aspects further comprises a predetermined circuit 
5 including a circuit portion which selectively comes into an active state or an inactive state, 
depending on the N enable signal respectively corresponding to the N identification code. 

According to a fourteenth aspect of the present invention, in the semiconductor 
device of the thirteenth aspect, the predetermined circuit is formed in one of the N 
semiconductor substrate together with a corresponding comparator circuit. 

10 According to a fifteenth aspect of the present invention, in the semiconductor 

device of any one of the first to fourteenth aspects, the number N is one. 

According to a sixteenth aspect of the present invention, in the semiconductor 
device of any one of the first to fourteenth aspects, the number N is two, and each of the 
N code generation unit and a corresponding memory are formed respectively in one and 
15 the other of the N semiconductor substrates. 

The present invention is also directed to a terminal device. According to a 
seventeenth aspect of the present invention, the terminal device comprises: a key 
generation unit comprising a semiconductor element and a coding circuit configured to 
convert an electric property of the semiconductor element into a digital signal so that a 
20 value of the digital signal varies with variation in the electric property of the 
semiconductor element to generate a key for encryption and outputting the key; an 
encryption circuit configured to encrypt transmitting data on the basis of the key; and a 
decoder circuit for decoding receiving data on the basis of the key. 

According to an eighteenth aspect of the present invention, in the semiconductor 
25 device of the seventeenth aspect, the encryption circuit and the decoder circuit are 
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incorporated in a main body portion, and the key generation unit is incorporated in an 
auxiliary portion detachable from the main body portion. 

According to a nineteenth aspect of the present invention, in the semiconductor 
device of the eighteenth aspect, the auxiliary portion is an 1C card. 

5 According to a twentieth aspect of the present invention, in the semiconductor 

device of any one of the seventeenth to nineteenth aspects, the semiconductor element has 
a polycrystalline substance, and the variation in the electric property of the semiconductor 
element is caused by variation in crystal structure of the polycrystalline substance. 

According to a twenty-first aspect of the present invention, the terminal device 
10 comprises: the semiconductor device as defined in the thirteenth or fourteenth aspect, and 
in the terminal device of the twenty-first aspect, the predetermined circuit is a 
communication circuit for transmitting and receiving a signal to and from the outside, and 
at least one of transmission and reception is stopped when the N enable signal indicates 
noncoincidence between at least one of the N identification code and a corresponding 
15 memory code. 

According to a twenty-second aspect of the present invention, the terminal 
device comprises: the semiconductor device as defined in any one of the sixth to twelfth 
aspects; and a communication circuit configured to transmit and receive a signal to and 
from the outside, and in the terminal device of the twenty-second aspect, the 
20 communication circuit transmits the N enable signal as part of the signal to the outside. 

According to a twenty-third aspect of the present invention the terminal device 
comprises: the semiconductor device as defined in any one of the first to fifth aspects; and 
a communication circuit configured to transmit and receive a signal to and from the 
outside, and in the terminal device of twenty-third aspect, the communication circuit 
25 transmits the N identification code and the N memory code as part of the signal to the 
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outside. 

According to a twenty-fourth aspect of the present invention, in the terminal 
device of the twenty-third aspect, the number N is one, the N code generation unit and the 
communication circuit are incorporated in a main body portion, and the N memory is 
5 incorporated in an auxiliary portion detachable from the main body portion. 

According to a twenty-fifth aspect of the present invention, in the terminal 
device of the twenty-fourth aspect, the main body portion further incorporates a first key 
generation unit configured to generate a first key for encryption; and a first encryption 
circuit configured to encrypt the identification code generated by the N code generation 
10 unit on the basis of the first key, and the auxiliary portion further incorporates a second 

key generation unit configured to generate a second key for encryption; and a second 

encryption circuit configured to encrypt the memory code stored in the N memory on the 
basis of the second key, the first encryption circuit also encrypts the memory code 
encrypted by the second encryption circuit on the basis of the first key, and the 

15 communication circuit transmits the identification code and the memory code both in a 

form encrypted by the first encryption circuit to the outside. 

According to a twenty-sixth aspect of the present invention, in the terminal 
device of the twenty-fifth aspect, the first key generation unit and the first encryption 
circuit are formed in the N semiconductor substrate in which the N code generation unit is 
20 formed. 

According to a twenty-seventh aspect of the present invention, in the terminal 
device of the twenty-fifth or twenty-sixth aspect, the second key generation unit and the 
second encryption circuit are formed in the semiconductor substrate in which the N 
memory is formed. 

25 According to a twenty-eighth aspect of the present invention, in the terminal 
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device of any one of the twenty-fourth to twenty-seventh aspects, the main body portion 
further incorporates a rechargeable battery, and the auxiliary portion is a battery charger 
which charges the battery when being attached to the main body portion. 

According to a twenty-ninth aspect of the present invention, in the terminal 
5 device of any one of the twenty-fourth to twenty-seventh aspects, the auxiliary portion is 
an IC card, and the main body portion and the auxiliary portion each further incorporate a 
communication interface used for transmitting a code from the auxiliary portion to the 
main body portion by wireless. 

According to a thirtieth aspect of the present invention, in the terminal device of 
10 any one of the twenty-second to twenty-ninth aspects, the communication circuit is 
formed in one of the N semiconductor substrate together with one of the N code 
generation unit. 

According to a thirty-first aspect of the present invention, the terminal device 
comprises: a communication circuit configured to perform radio communication through 
15 a communication common carrier equipment; and a radio communication network circuit 
configured to perform radio communication by forming a radio communication network 
not through the communication common carrier equipment. 

According to a thirty-second aspect of the present invention, the terminal device 
of the thirty-first aspect further comprises: a selector circuit configured to selectively 
20 perform connection and disconnection of a path through which communication signals are 
transmitted and received between the communication circuit and the radio communication 
network circuit, to selectively establish communication between a user of the terminal 
device and one other person through the radio communication network and a relay of 
communication between a plurality of persons other than the user of the terminal device 
25 through the radio communication network. 
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According to a thirty-third aspect of the present invention, the terminal device of 
the thirty-second aspect further comprises: a key generation unit configured to generate a 
key for encryption; an encryption circuit configured to encrypt a transmitting signal to be 
transmitted from the communication circuit to the radio communication network circuit, 
5 among the communication signals, on the basis of the key; and a decoder circuit 
configured to decode a receiving signal to be transmitted from radio communication 
network circuit to the communication circuit, among the communication signals, on the 
basis of the key, and in the terminal device of thirty-third aspect, the key generation unit 
comprises a code generation unit configured to generate a code for identifying the 
1 0 terminal device; and a key calculation unit configured to calculate a shared key sharable 
among the user and his communication partner, on the basis of the code generated by the 
code generation unit and another code transmitted from the communication partner 
through the radio communication network circuit. 

According to a thirty-fourth aspect of the present invention, in the terminal 
15 device of the thirty-third aspect, the code generation unit comprises a semiconductor 
element; and a coding circuit for converting an electric property of the semiconductor 
element into a digital signal so that a value of the digital signal varies with variation in the 
electric property of the semiconductor element to generate the code and outputting the 
code. 

20 According to a thirty-fifth aspect of the present invention, in the terminal device 

of the thirty-fourth aspect, the semiconductor element has a polycrystalline substance, and 
the variation in the electric property of the semiconductor element is caused by variation 
in crystal structure of the polycrystalline substance. 

According to a thirty-sixth aspect of the present invention, in the terminal device 
25 of the thirty-third aspect, the code generation unit comprises an OTPROM storing the 
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code. 

According to a thirty-seventh aspect of the present invention, the terminal device 
of any one of the thirty-second to thirty-sixth aspects further comprises: a first mixer and 
a second mixer inserted in a path for a receiving signal to be transmitted from the radio 
5 communication network circuit to the communication circuit, among the communication 
signals, and in the terminal device of thirty-seventh aspect, the first mixer demodulates 
the receiving signal received by the communication circuit, and the second mixer 
modulates the demodulated receiving signal with a carrier wave having a frequency 
within a frequency band of the communication circuit. 

10 The present invention is further directed to a communication method. 

According to a thirty-eighth aspect of the present invention, the communication method 
which enables a communication common carrier equipment and the terminal device as 
defined in the twenty-second aspect to perform mutual communication, comprises the 
steps of: (a) transmitting the N enable signal from the terminal device to the 
1 5 communication common carrier equipment; and (b) as an authentication step, performing 
an authentication that a user of the terminal device is an authorized user by the 
communication common carrier equipment when a condition that each of the N enable 
signal received by the communication common carrier equipment indicates coincidence 
between a corresponding identification code and a corresponding memory code is 
20 satisfied and not performing the authentication by the communication common carrier 
equipment when the condition is not satisfied. 

According to a thirty-ninth aspect of the present invention, the communication 
method which enables a communication common carrier equipment and the terminal 
device as defined in the twenty-third aspect to perform mutual communication, comprises 
25 the steps of: (a) transmitting the N identification code and the N memory code from the 
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terminal device to the communication common carrier equipment; (b) comparing each of 
the N identification code and a corresponding memory code which are received to judge 
whether each of the N identification code and a corresponding memory code coincides 
with each other or not by the communication common carrier equipment; and (c) as an 
5 authentication step, performing an authentication that a user of the terminal device is an 
authorized user by the communication common carrier equipment when a condition that a 
judgment result indicates coincidence between each of the N identification code and a 
corresponding memory code in the step (b) is satisfied and not performing the 
authentication by the communication common carrier equipment when the condition is 
10 not satisfied. 

According to a fortieth aspect of the present invention, the communication 
method of the thirty-ninth aspect further comprises the step of: (e) recording the N 
identification code and the N memory code which are received by the communication 
common carrier equipment. 

1 5 According to a forty-first aspect of the present invention, in the communication 

method of the thirty-ninth aspect, the communication common carrier equipment, in the 
step (c), records the N identification code and the N memory code which are received 
when the authentication is not performed. 

According to a forty-second aspect of the present invention, the communication 
20 method comprises the steps of: (a) obtaining the N identification code of the terminal 
device as defined in the twenty-fourth aspect to store the N identification code as a first 
registered code by the communication common carrier equipment; (b) obtaining the N 
memory code of the terminal device to store the N memory code as a second registered 
code by the communication common carrier equipment; and (c) as a communication step, 
25 performing mutual communication between the communication common carrier 
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equipment and the terminal device after the steps (a) and (b), and in the communication 
method of the forty-second aspect, the step (c) comprises (c-1) a first communication step 
which is performed when the auxiliary portion is not attached to the main body portion, 
and (c-2) a second communication step which is performed when the auxiliary portion is 
5 attached to the main body portion, the first communication step (c-1) comprises the steps 
of: (c-1 -1 ) transmitting the N identification code from the terminal device to the 
communication common carrier equipment; (c-1 -2) comparing the N identification code 
which is received with the first registered code to judge whether the N identification code 
and the first registered code coincide with each other or not by the communication 
10 common carrier equipment; and (c-1 -3) as an authentication step, performing an 

authentication that a user of the terminal device is an authorized user by the 
communication common carrier equipment when a condition that the judgment result 
indicates coincidence between the N identification code and the first registered code in 
the step (c-1 -2) is satisfied and not performing the authentication by the communication 
15 common carrier equipment when the condition is not satisfied, and the second 

communication step (c-2) comprises the steps of: (c-2-1) transmitting the N identification 
code and the N memory code from the terminal device to the communication common 
carrier equipment; (c-2-2) comparing the N identification code which is received with the 
first registered code to judge whether the N identification code and the first registered 
20 code coincide with each other or not and comparing the N memory code which is 

received with the second registered code to judge whether the N memory code and the 
second registered code coincide with each other or not by the communication common 
carrier equipment; and (c-2-3) as a high-level authentication step, performing a high-level 
authentication that a user of the terminal device is an authorized user by the 
25 communication common carrier equipment when a condition that both two judgment 
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results indicate coincidences in the step (c-2-2) is satisfied and not performing the high- 
level authentication by the communication common carrier equipment when the condition 
is not satisfied. 

According to a forty-third aspect of the present invention, in the communication 
5 method of the forty-second aspect, the communication common carrier equipment, in the 
step (b), obtains the N memory code of the terminal device by performing communication 
between the communication common carrier equipment and the terminal device with the 
auxiliary portion attached to the main body portion. 

According to a forty-fourth aspect of the present invention, in the 
10 communication method of the forty-second or forty-third aspect, the step (c) further 
comprises the step of: (c-3) a changing step of changing the second registered code when 
the auxiliary portion is attached to the main body portion, the changing step (c-3) 
comprises the steps of (c-3-1) transmitting a request signal representing decision of 
change of the second registered code, the N identification code and the N memory code 
15 from the terminal device to the communication common carrier equipment; (c-3 -2) 
comparing the N identification code which is received with the first registered code to 
judge whether the N identification code and the first registered code coincide with each 
other or not and comparing the N memory code which is received with the second 
registered code to judge whether the N memory code and the second registered code 
20 coincide with each other or not by the communication common carrier equipment; (c-3-3) 
permitting the change by the communication common carrier equipment only when both 
two judgment results indicate coincidences in the step (c-3-2); (c-3-4) changing the 
auxiliary portion of the terminal device and attaching a changed auxiliary portion to the 
main body portion after the step of (c-3-3); (c-3-5) transmitting the N identification code 
25 and the N memory code changed on the basis of the changed auxiliary portion from the 
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terminal device to the communication common carrier equipment after the step of (c-3-4); 
and (c-3-6) updating the second registered code by the communication common carrier 
equipment with the changed N memory code which is received only when the change is 
permitted in the step of (c-3-3). 

5 According to a forty-fifth aspect of the present invention, the communication 

method comprises the steps of: (a) obtaining the N identification code and the first key 
from the terminal device as defined in claim 25 to store the N identification code and the 
first key as a first registered code and a registered key, respectively, by the 
communication common carrier equipment; (b) obtaining the N memory code which is 
10 encrypted with the second key of the terminal device to store the N memory code as a 
second registered code by the communication common carrier equipment; and (c) as a 
communication step, performing mutual communication between the communication 
common carrier equipment and the terminal device after the steps (a) and (b), and in the 
communication method of forty-fifth aspect, the communication step (c) comprises (c-1) 
15 a first communication step which is performed when the auxiliary portion is not attached 
to the main body portion, and (c-2) a second communication step which is performed 
when the auxiliary portion is attached to the main body portion, the first communication 
step (c-1) comprises the steps of: (c-1-1) transmitting the N identification code in a form 
encrypted by the first encryption circuit from the terminal device to the communication 
20 common carrier equipment; (c-1 -2) decoding the N identification code which is received 
on the basis of the registered key and comparing the N identification code with the first 
registered code to judge whether the N identification code and the first registered code 
coincide with each other or not by the communication common carrier equipment; and (c- 
1-3) as an authentication step, performing an authentication that a user of the terminal 
device is an authorized user by the communication common carrier equipment when a 
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condition that the judgment result indicates coincidence between the N identification code 
and the first registered code in the step (c-1-2) is satisfied and not performing the 
authentication by the communication common carrier equipment when the condition is 
not satisfied, and the second communication step (c-2) comprises the steps of: (c-2-1) 
5 transmitting the N identification code and the N memory code both in a form encrypted 
by the first encryption circuit from the terminal device to the communication common 
carrier equipment; (c-2-2) decoding the N identification code and the N memory code 
which are received on the basis of the registered key and comparing the N identification 
code with the first registered code to judge whether the N identification code and the first 
1 0 registered code coincide with each other or not and comparing the N memory code with 
the second registered code to judge whether the N memory code and the second registered 
code coincide with each other or not by the communication common carrier equipment; 
and (c-2-3) as a high-level authentication step, performing a high-level authentication that 
a user of the terminal device is an authorized user by the communication common carrier 
15 equipment when a condition that both two judgment results indicate coincidences in the 
step (c-2-2) is satisfied and not performing the high-level authentication by the 
communication common carrier equipment when the condition is not satisfied. 

According to a forty-sixth aspect of the present invention, in the communication 
method of the forty-fifth aspect, the communication common carrier equipment, in the 
20 step (b), obtains the N memory code encrypted with the second key of the terminal device 
by performing communication between the communication common carrier equipment 
and the terminal device with the auxiliary portion attached to the main body portion. 

According to a forty-seventh aspect of the present invention, in the 
communication method of the forty-fifth or forty-sixth aspect, the step (c) further 
25 comprises: (c-3) a changing step of changing the second registered code when the 
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auxiliary portion is attached to the main body portion, the changing step (c-3) comprises 
the steps of: (c-3-1) transmitting a request signal representing decision of change of the 
second registered code, and the N identification code and the N memory code both in a 
form encrypted by the first encryption circuit from the terminal device to the 
5 communication common carrier equipment; (c-3-2) decoding the N identification code 
and the N memory code which are received on the basis of the registered key and 
comparing the N identification code with the first registered code to judge whether the N 
identification code and the first registered code coincide with each other or not and 
comparing the N memory code with the second registered code to judge whether the N 
10 memory code and the second registered code coincide with each other or not by the 
communication common carrier equipment; (c-3-3) permitting the change by the 
communication common carrier equipment only when a condition that both two judgment 
results indicate coincidences in the step (c-3-2) is satisfied; (c-3-4) changing the auxiliary 
portion of the terminal device and attaching a changed auxiliary portion to the main body 
15 portion after the step of (c-3-3); (c-3-5) transmitting the N identification code and the N 
memory code changed on the basis of the changed auxiliary portion both in a form 
encrypted by the first encryption circuit from the terminal device to the communication 
common carrier equipment after the step of (c-3-4); and (c-3-6) updating the second 
registered code by the communication common carrier equipment with a code obtained 
20 by decoding the changed N memory code which is received on the basis of the registered 
key only when the change is permitted in the step of (c-3-3). 

According to a forty-eighth aspect of the present invention, in the 
communication method of any one of the forty-second to forty-seventh aspects, the 
communication common carrier equipment, in the high-level authentication step, records 
each code which is compared with each registered code in the step of (c-2-2), when the 
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high-level authentication is not performed. 

According to a forty-ninth aspect of the present invention, in the communication 
method of any one of the forty-second to forty-eighth aspects, the communication 
common carrier equipment, in the high-level authentication step, records a 
5 communication charge for the communication therebefore as confirmed, when the 
high-level authentication is performed. 

According to a fiftieth aspect of the present invention, in the communication 
method of any one of the forty-second to forty-ninth aspects, the communication common 
carrier equipment, in the high-level authentication step, records that the high-level 
10 authentication has been performed when the high-level authentication is performed, and 
the communication common- carrier equipment, in the authentication step, performs the 
authentication on a further condition that there is a record that the high-level 
authentication has been performed. 

According to a fifty-first aspect of the present invention, in the communication 
15 method of any one of the forty-second to fiftieth aspects, the communication common 
carrier equipment, in the high-level authentication step, records a business transaction 
through the communication therebefore as concluded when the high-level authentication 
is performed and records the business transaction through the communication therebefore 
as not concluded when the high-level authentication is not performed. 

20 According to a fifty-second aspect of the present invention, in the 

communication method of any one of the thirty-eighth to fifty-first aspects, the 
communication common carrier equipment, in the authentication step, continues the 
communication when the authentication is performed and stops the communication when 
the authentication is not performed. 

25 According to a fifty-third aspect of the present invention, the communication 
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method enables communication between terminal devices each of which is capable of 
performing radio communication through a communication common carrier equipment 
and forming a radio communication network not through the communication common 
carrier equipment in a space where people in crowds carrying the terminal devices 
5 assemble or pass by, by forming the radio communication network among the terminal 
devices carried by at least some of the people, even when a region where the radio 
communication can not be performed through the communication common carrier 
equipment exists in the space. 

According to a fifty-fourth aspect of the present invention, in the communication 
1 0 method of the fifty-third aspect, some of the plurality of terminal devices which form the 
radio communication network perform the radio communication through the 
communication common carrier equipment, to enable the others of the terminal devices 
which form the radio communication network to establish communication through the 
radio communication network and further through the communication common carrier 
15 equipment. 

According to a fifty-fifth aspect of the present invention, in the communication 
method of the fifty-third or fifty-fourth aspect, a pair of terminal devices performing 
mutual communication through the radio communication network, which constitute part 
of the terminal devices which form the radio communication network, calculate a shared 
20 key by exchanging codes for identifying themselves and transmit a communication signal 
in a form encrypted on the basis of the shared key to each other. 

According to a fifty-sixth aspect of the present invention, in the communication 
method of any one of the fifty-third to fifty-fifth aspects, the communication through the 
radio communication network is permitted only for emergency communication. 

25 According to a fifty-seventh aspect of the present invention, in the 
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communication method of any one of the fifty-third to fifty-sixth aspects, another 
terminal device capable of forming the radio communication network is installed in the 
region where the radio communication through the communication common carrier 
equipment is not performed, to thereby enable formation of the radio communication 
5 network even when the population density of persons carrying the terminal devices is low. 

In the semiconductor device of the first aspect of the present invention, since the 
code for identifying the semiconductor substrate is stored in one other semiconductor 
substrate, a fraudulent use of an appliance incorporating the present device through 
replacement of the semiconductor substrate can be prevented by checking these codes. 

10 In the semiconductor device of the second aspect of the present invention, since 

the code is stored in the OTPROM of the memory, there is a high barrier (security) 
against a fraudulent change of the code stored in the memory. 

In the semiconductor device of the third aspect of the present invention, since the 
identification code is generated by using the variation in the electric properties of the 
15 semiconductor elements, it is possible to use the semiconductor elements manufactured 
through the same process among a lot of mass-produced present devices. Therefore, the 
manufacturing process of the present device can be simplified. Further, since the 
electric property of the semiconductor element on which the identification code is based 
can not be changed from the outside, there is a high barrier against a fraudulent change of 
20 the identification code. 

In the semiconductor device of the fourth aspect of the present invention, since 
the semiconductor element has a polycrystalline substance and the identification code is 
generated by using the variation (i.e. dispersion) in crystal structure of the polycrystalline 
substance, there is large variation in the electric property of the semiconductor elements 
25 manufactured through the same process. Therefore, it is easy to prevent coincidence of 
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the identification codes among a lot of mass-produced present devices. 

In the semiconductor device of the fifth aspect of the present invention, since the 
identification code is stored in the OTPROM of the code generation unit, there is a high 
barrier against a fraudulent change of the identification code generated by the code 
5 generation unit. 

In the semiconductor device of the sixth aspect of the present invention, since the 
comparator circuit makes judgment on coincidence of the codes, it is possible to use the 
enable signal for authentication. 

In the semiconductor device of the seventh aspect of the present invention, the 
10 comparator circuit is formed in the semiconductor substrate in which the code generation 
unit is formed, it is impossible to fraudulently change the identification code inputted 
from the code generation unit to the comparator circuit in the same semiconductor 
substrate from the outside. Therefore, there is a higher barrier against the fraud use. 

In the semiconductor device of the eighth aspect of the present invention, since 
15 the codes are transmitted in the encrypted form between the different semiconductor 
substrates, it is impossible to read the codes from the outside. Therefore, there is a still 
higher barrier against the fraud use. 

In the semiconductor device of the ninth aspect of the present invention, since 
the key is generated by using the variation in the electric properties of the semiconductor 
20 elements, it is possible to use the semiconductor elements manufactured through the same 
process among a lot of mass-produced present devices. Therefore, the manufacturing 
process of the present device can be simplified. Further, since the electric property of 
the semiconductor element on which the key is based can not be changed from the outside, 
there is a high barrier against a fraudulent change of the key. 

25 In the semiconductor device of the tenth aspect of the present invention, since 
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the semiconductor element has a polycrystalline substance and the key is generated by 
using the variation (i.e. dispersion) in crystal structure of the polycrystalline substance, 
there is large variation in the electric property of the semiconductor elements 
manufactured through the same process. Therefore, it is easy to prevent coincidence of 
5 the keys among a lot of mass-produced present devices. 

In the semiconductor device of the eleventh aspect of the present invention, since 
the key is stored in the OTPROM of the key generation unit, there is a high barrier against 
a fraudulent change of the key generated by the key generation unit. 

Since the semiconductor device of the twelfth aspect of the present invention 
10 comprises the switching circuit, it is possible to prevent a fraudulent use through inputting 
the identification code outputted from the semiconductor substrate, which fakes the 
memory code, to the same semiconductor substrate. 

Since the semiconductor device of the thirteenth aspect of the present invention 
comprises the predetermined circuit including the circuit portion which selectively comes 
15 into an active state or an inactive state, depending on the judgment of the comparator 
circuit, it is possible to enable or disable a predetermined operation of the appliance 
depending on the comparison result, by using the predetermined circuit as part of a circuit 
for achieving the function of the appliance. 

In the semiconductor device of the fourteenth aspect of the present invention, 
20 since the predetermined circuit is formed in one of the semiconductor substrates in which 
the code generation unit and the comparator circuit are formed, the enable signal inputted 
from the comparator circuit to th predetermined circuit in the same semiconductor 
substrate can not be inputted from the outside. Therefore, there is a still higher barrier 
against the fraud use. 

25 The semiconductor device of the fifteenth aspect of the present invention has the 
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simplest structure in which the code generation unit is formed in one of the two 
semiconductor substrates and the memory is formed in the other and the code which 
coincides with the identification code inherent in the one of the semiconductor substrates 
is stored in the other semiconductor substrate. Therefore, it is easy to manufacture the 
5 device and it is possible to reduce the size of the device. 

In the semiconductor device of the sixteenth aspect of the present invention, the 
code generation unit and the memory are each formed in both the two semiconductor 
substrates and the two semiconductor substrates store the codes each of which coincides 
with the other's identification code, it is possible to suppress the number of semiconductor 
10 substrates to the minimum and achieve a higher barrier against the fraudulent use. 

In the terminal device of the seventeenth aspect of the present invention, since 
the data are transmitted and received in the encrypted form to and from the outside, there 
is a high barrier against leakage of information that the data represent. Moreover, since 
the key for encryption is generated by using the variation in the electric properties of the 
15 semiconductor elements, it is possible to use the semiconductor elements manufactured 
through the same process among a lot of mass-produced present devices. Therefore, the 
manufacturing process of the present device can be simplified. Further, since the 
electric property of the semiconductor element on which the key is based can not be 
changed from the outside, there is a high barrier against a fraudulent change of the key. 

20 In the terminal device of the eighteenth aspect of the present invention, since the 

key generation unit is incorporated in the auxiliary portion detachable from the main body 
portion, a key can be used for a plurality of main body portions. 

In the terminal device of the nineteenth aspect of the present invention, since the 
key generation unit is incorporated in the I C card, this is convenient to carry. 

25 In the terminal device of the twentieth aspect of the present invention, since the 
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semiconductor element has a polycrystalline substance and the key is generated by using 
the variation (i.e. dispersion) in crystal structures of the polycrystalline substances, there 
is large variation in the electric property of the semiconductor elements manufactured 
through the same process. Therefore, it is easy to prevent coincidence of the keys 
5 among a lot of mass-produced present devices. 

Since the terminal device of the twenty-first aspect of the present invention 
comprises the communication circuit which stops at least one of transmission and 
reception when the judgment of the comparator circuit indicates noncoincidence, it is 
possible to automatically suppress a fraudulent use of the appliance incorporating the 
1 0 present device for communication through replacement of the semiconductor substrate, by 
the action of the terminal device itself without a procedure of the communication 
common carrier equipment. 

In the terminal device of the twenty-second aspect of the present invention, since 
the enable signal is transmitted, the communication common carrier equipment performs 
15 the authentication on the basis of the enable signal to prevent a fraudulent use of the 
appliance incorporating the present device for communication through replacement of the 
semiconductor substrate. 

In the terminal device of the twenty-third aspect of the present invention, since 
the identification code and the memory code are transmitted, the communication common 
20 carrier equipment compares these codes and performs the authentication on the basis of 
the comparison result to prevent a fraudulent use of the appliance incorporating the 
present device for communication through replacement of the semiconductor substrate. 

In the terminal device of the twenty-fourth aspect of the present invention, since 
the memory is incorporated in the auxiliary portion detachable from the main body 
25 portion, the communication common carrier equipment can perform the authentications of 
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different levels in two cases where the main body portion and the auxiliary portion are 
combined and where the main body portion and the auxiliary portion are not combined. 
For example, through the high-level authentication performed when the main body 
portion and the auxiliary portion is combined, the communication common carrier 
5 equipment can record the communication charge for the communication therebefore as 
confirmed and it is possible to prevent an illegal action of evading the duty of payment on 
the pretence that the terminal device has been lost. 

In the terminal device of the twenty-fifth aspect of the present invention, since 
the identification code and the memory code are transmitted in the encrypted form, there 
10 is a high barrier against leakage of the codes. 

In the terminal device of the twenty-sixth aspect of the present invention, since 
the first key generation unit and the first encryption circuit are formed in a single 
semiconductor substrate together with the code generation unit, there is a higher barrier 
against leakage of the identification code and the first key. 

15 In the terminal device of the twenty-seventh aspect of the present invention, 

since the second key generation unit and the second encryption circuit are formed in a 
single semiconductor substrate together with the memory, there is a higher barrier against 
leakage of the memory code and the second key. 

In the terminal device of the twenty-eighth aspect of the present invention, since 
20 the auxiliary portion is the battery charger which charges the battery of the main body 
portion, the main body portion and the auxiliary portion are periodically combined 
without requesting an extra labor of the user. 

In the terminal device of the twenty-ninth aspect of the present invention, since 
the auxiliary portion is the IC card, this is convenient to carry. Further, since the codes 
25 are transmitted between the main body portion and the auxiliary portion by wireless, it is 
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possible to achieve combination of the main body portion and the auxiliary portion only 
by carrying the IC card and the main body portion. 

In the terminal device of the thirtieth aspect of the present invention, since the 
communication circuit is formed in one of the semiconductor substrates in which the code 
5 generation unit is formed, the enable signal or the codes inputted to the communication 
circuit in the same semiconductor substrate can not inputted from the outside. Therefore, 
there is a higher barrier against the fraudulent use. 

In the terminal device of the thirty-first aspect of the present invention, the 
communication can be established in the space where people in crowds carrying the 
10 terminal devices assemble or pass by, by forming the radio communication network 
among the terminal devices carried by at least some of the people, even when the region 
where the radio communication through the communication common carrier equipment 
can not be performed, e.g., an underground shopping area, exists in the space. 

Since the terminal device of the thirty-second aspect of the present invention 
1 5 comprises the selector circuit, not only the terminal device can relay the communication 
between other persons other than the user of the terminal device through the radio 
communication network, but also the user of the terminal device can perform 
communication through the radio communication network. 

In the terminal device of the thirty-third aspect of the present invention, since the 
20 shared key can be set by exchanging the codes with the communication partner and the 
communication signal is transmitted in the form encrypted on the basis of the shared key, 
there is a high barrier against leakage of the content of communication with any 
communication partner. 

In the terminal device of the thirty-fourth aspect of the present invention, since 
25 the code on which the shared key is based is generated by using the variation in the 
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electric properties of the semiconductor elements, it is possible to use the semiconductor 
elements manufactured through the same process among a lot of mass-produced present 
devices. Therefore, the manufacturing process of the present device can be simplified. 
Further, since the electric property of the semiconductor element on which the code is 
5 based can not be changed from the outside, there is a high barrier against the fraudulent 
change of the code. 

In the terminal device of the thirty-fifth aspect of the present invention, since the 
semiconductor element has a polycrystalline substance and the code is generated by using 
the variation (i.e. dispersion) in crystal structure of the polycrystalline substance, there is 
10 large variation in the electric property of the semiconductor elements manufactured 
through the same process. Therefore, it is easy to prevent coincidence of the codes 
among a lot of mass-produced present devices. 

In the terminal device of the thirty-sixth aspect of the present invention, since the 
code is stored in the OTPROM of the code generation unit, there is a high barrier against 
1 5 a fraudulent change of the code generated by the code generation unit. 

In the terminal device of the thirty-seventh aspect of the present invention, since 
the signal received by the radio communication network circuit is transmitted to the 
communication circuit after being demodulated and then modulated, it is possible to 
enhance the utilization ratio of the frequency band of the communication circuit. 

20 In the communication method of the thirty-eighth aspect of the present invention, 

since the enable signal transmitted from the terminal device is used for the authentication, 
it is possible to prevent a fraudulent use of the appliance incorporating the present device 
for communication through replacement of the semiconductor substrate. 

In the communication method of the thirty-ninth aspect of the present invention, 
25 since the identification code and the memory code transmitted from the terminal device 
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are used for the authentication, it is possible to prevent a fraudulent use of the appliance 
incorporating the present device for communication through replacement of the 
semiconductor substrate. 

In the communication method of the fortieth aspect of the present invention, 
5 since the identification code and the memory code which are received are recorded, it is 
possible to effectively suppress a crime with the fraudulent use before being committed. 
Further, if the fraudulent use is made, the recorded code can be useful for specifying the 
unauthorized user. 

In the communication method of the forty-first aspect of the present invention, 
1 0 since the identification code and the memory code which are received are recorded when 

the authentication is not performed in the authentication step, i.e., when the user is not 
authorized, the recorded codes can be useful for specifying the unauthorized user. 

In the communication method of the forty-second aspect of the present invention, 
the authentications of different levels are performed in two cases where the main body 
15 portion and the auxiliary portion are combined and where the main body portion and the 
auxiliary portion are not combined. Since the high-level authentication in combination 
of the main body portion and the auxiliary portion is performed only when both the 
identification code and the memory code coincide with the registered codes, the high- 
level authentication proves that the terminal device is used validly with higher accuracy. 
20 Therefore, the communication common carrier equipment can selectively use the two 
authentications in accordance with the importance of procedure. 

In the communication method of the forty-third aspect of the present invention, 
since the memory code to be registered is transmitted to the communication common 
carrier equipment by performing communication with the auxiliary portion attached to the 
25 main body portion, only the identification code has to be registered before the terminal 
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device is supplied for the user. 

In the communication method of the forty-fourth aspect of the present invention, 
since the second registered code can be changed, the user can change the auxiliary portion 
as necessary after acquiring the terminal device. 

5 In the communication method of the forty-fifth aspect of the present invention, 

the authentications of different levels are performed in two cases where the main body 
portion and the auxiliary portion are combined and where the main body portion and the 
auxiliary portion are not combined. Since the high-level authentication in combination 
of the main body portion and the auxiliary portion is performed only when both the 
10 identification code and the memory code coincide with the registered codes, the high- 
level authentication proves that the terminal device is used validly with higher accuracy. 
Therefore, the communication common carrier equipment can selectively use the two 
authentications in accordance with the importance procedure. Moreover, since the 
identification code and the memory code are transmitted in the encrypted form, there is a 
1 5 high barrier against leakage of the codes. 

In the communication method of the forty-sixth aspect of the present invention, 
since the memory code to be registered is transmitted to the communication common 
carrier equipment by performing communication with the auxiliary portion attached to the 
main body portion, only the identification code has to be registered before the terminal 
20 device is supplied for the user. 

In the communication method of the forty-seventh aspect of the present 
invention, since the second registered code can be changed, the user can change the 
auxiliary portion as necessary after acquiring the terminal device. 

In the communication method of the forty-eighth aspect of the present invention, 
25 since the identification code and the memory code which are received are recorded when 
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the high-level authentication is not performed in the high-level authentication step, i.e., 
when there is strong possibility that the user is not authorized, the recorded codes can be 
useful for specifying the unauthorized user. 

In the communication method of the forty-ninth aspect of the present invention, 
5 since the communication charge for communication therebefore is recorded as confirmed 
when the high-level authentication is performed in the high-level authentication step, i.e., 
when there is strong possibility that the user is authorized, it is possible to prevent an 
illegal action of evading the duty of payment on the pretence that the terminal device has 
been lost. 

1 0 In the communication method of the fiftieth aspect of the present invention, since 

the judgment result made in the past high-level authentication step is reflected on the 
normal authentication performed with the auxiliary portion not attached to the main body 
portion, it is possible to perform an important procedure such as business transaction 
under the normal authentication. 

15 In the communication method of the fifty-first aspect of the present invention, 

since whether the business transaction through the communication therebefore is 
concluded or not is recorded in accordance with whether the high-level authentication is 
performed or not in the high-level authentication step, it is possible to resolve or reduce 
the loss through the illegal business transaction based on the fraudulent use of the 

20 terminal device. 

In the communication method of the fifty-second aspect of the present invention, 
since the communication is continued or stopped in accordance with the authentication is 
performed or not in the authentication step, it is possible to prevent the communication 
based on the fraudulent use of the terminal device. 

In the communication method of the fifty-third aspect of the present invention, 
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the communication can be established in the space where people in crowds carrying the 
terminal devices having the predetermined function assemble or pass by, by forming the 
radio communication network among the terminal devices carried by at least some of the 
people, even when the region where the radio communication through the communication 
5 common carrier equipment can not be performed, e.g., an underground shopping area, 
exists in the space. 

In the communication method of the fifty-fourth aspect of the present invention, 
since some of the terminal devices which form the radio communication network perform 
the radio communication through the communication common carrier equipment to 
10 enable the others of the terminal devices to perform communication through the radio 
communication network and further through the communication common carrier 
equipment, it becomes possible to establish the radio communication through the 
communication common carrier equipment from the region where the radio 
communication through the communication common carrier equipment can not be 
15 performed, e.g., an underground shopping area. 

In the communication method of the fifty-fifth aspect of the present invention, 
since the shared key is set by exchanging the codes with the communication partner and 
the communication signal is transmitted in the form encrypted on the basis of the shared 
key, there is a high barrier against leakage of the content of communication with any 
20 communication partner. 

In the communication method of the fifty-sixth aspect of the present invention, 
since the communication through the radio communication network is permitted only for 
emergency communication, such as a request for aid at the time when an emergency 
which endangers life and property occurs, this does not need the procedure of encryption 
25 for preventing leakage of the content of communication. 




33 



In the communication method of the fifty-seventh aspect of the present invention, 
since the terminal device capable of forming the radio communication network is 
installed in the region where the radio communication through the communication 
common carrier equipment can not be performed, e.g., an underground shopping area, the 
5 communication through the radio communication network can be established even when 
the population density of persons carrying the terminal devices having the predetermined 
function is low in the region. 

An object of the present invention is to provide a semiconductor device, a 
terminal device and a communication method to enhance the technical barrier (security) 
10 against various types of fraudulent use. A further object of the present invention is to 
provide a terminal device and a communication method which achieve higher 
convenience in radio communication by utilizing this technique. 

These and other objects, features, aspects and advantages of the present 
invention will become more apparent from the following detailed description of the 
1 5 present invention when taken in conjunction with the accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram showing a semiconductor device in accordance with a 
first preferred embodiment of the present invention; 

20 Fig. 2 is a block diagram showing a code generation unit of Fig. 1; 

Fig. 3 is a plan view showing a semiconductor element of Fig. 2; 

Fig. 4 is a cross section taken along the line A-A of the semiconductor element 
of Fig. 3; 

Fig. 5 is a plan view showing a semiconductor element of Fig. 2; 

25 Fig. 6 is a graph representing the properties of the semiconductor element of Fig. 
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2 ; 

Fig. 7 is a block diagram showing another example of the code generation unit of 

Fig. 1; 

Fig. 8 is a block diagram showing a memory of Fig. 1; 

5 Fig. 9 is a block diagram showing a terminal device in accordance with the first 

preferred embodiment of the present invention; 

Fig. 10 is a block diagram showing a communication circuit of Fig. 9; 

Fig. 1 1 is a flowchart of procedure for the use of the terminal device of Fig. 9; 

Fig. 12 is a block diagram showing a communication system in accordance with 
1 0 the first preferred embodiment of the present invention; 

Fig. 1 3 is a block diagram showing a semiconductor device in accordance with a 
second preferred embodiment of the present invention; 

Fig. 14 is a block diagram showing a terminal device in accordance with the 
second preferred embodiment of the present invention; 

15 Fig. 15 is a flowchart of procedure for the use of the terminal device of Fig. 13; 

Fig. 16 is a block diagram showing a terminal device in accordance with a third 
preferred embodiment of the present invention; 

Fig. 17 is a flowchart of communication method using the terminal device of Fig. 

16; 

20 Fig. 18 is a block diagram showing another example of the terminal device in 

accordance with the third preferred embodiment of the present invention; 

Fig. 19 is a flowchart of communication method using the terminal device of Fig. 

18; 

Fig. 20 is a block diagram showing a terminal device in accordance with a fourth 
25 preferred embodiment of the present invention; 
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Fig. 21 is a flowchart of communication method using the terminal device of Fig. 

20 ; 

Fig. 22 is a block diagram showing another example of the terminal device in 
accordance with the fourth preferred embodiment of the present invention; 

5 Fig. 23 is a flowchart of communication method using the terminal device of Fig. 

22 ; 

Fig. 24 is a block diagram showing a semiconductor device in accordance with a 
fifth preferred embodiment of the present invention; 

Fig. 25 is a block diagram showing a key generation unit of Fig. 24; 

10 Fig. 26 is a block diagram showing another example of the key generation unit of 

Fig. 24; 

Fig. 27 is a flowchart of procedure for the use of the terminal device 
incorporating the semiconductor device of Fig. 24; 

Fig. 28 is a block diagram showing another example of the semiconductor device 
15 in accordance with the fifth preferred embodiment of the present invention; 

Fig. 29 is a flowchart of procedure for the use of the terminal device 
incorporating the semiconductor device of Fig. 28; 

Fig. 30 is a block diagram of a semiconductor device in accordance with a sixth 
preferred embodiment of the present invention; 

20 Fig. 31 is a block diagram showing a terminal device in accordance with a 

seventh preferred embodiment of the present invention; 

Fig. 32 is a block diagram showing another example of the terminal device in 
accordance with the seventh preferred embodiment of the present invention; 

Fig. 33 is a block diagram showing a terminal device in accordance with an 
25 eighth preferred embodiment of the present invention; 
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Fig. 34 is a flowchart of procedure for the use of the terminal device of Fig. 33; 

Figs. 35 and 36 are flowcharts of the step S509 of Fig. 34; 

Fig. 37 is a block diagram showing a terminal device in accordance with a ninth 
preferred embodiment of the present invention; 

5 Fig. 38 is a flowchart of procedure for the use of the terminal device of Fig. 37; 

Figs. 39 and 40 are flowcharts of the step S709 of Fig. 38; 

Fig. 41 is a flowchart of another example of the step 709 of Fig. 38; 

Figs. 42 and 43 are flowcharts of the step S742 of Fig. 41; 

Figs. 44 and 45 are flowcharts of another example of the step 709 of Fig. 38; 

10 Fig. 46 is a block diagram showing another example of the terminal device in 

accordance with the ninth preferred embodiment of the present invention; 

Fig. 47 is an explanatory diagram of a communication method in accordance 
with a tenth preferred embodiment of the present invention; 

Fig. 48 is a block diagram showing a terminal device in accordance with the 
1 5 tenth preferred embodiment of the present invention; 

Fig. 49 is a block diagram showing another example of the terminal device in 
accordance with the tenth preferred embodiment of the present invention; 

Fig. 50 is a block diagram showing a key generation unit f Fig. 49; 

Fig. 51 is a flowchart of key generation by the terminal device of Fig. 49; 

20 Fig. 52 is a block diagram showing still another example of the terminal device 

in accordance with the tenth preferred embodiment of the present invention; 

Fig. 53 is an illustration for explaining an operation of the terminal device of Fig. 
52; 

Fig. 54 is an illustration for explaining an operation compared with that of Fig. 



25 53; 
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Fig. 55 is an explanatory diagram of another example of the communication 
method in accordance with the tenth preferred embodiment of the present invention; 

Fig. 56 is an explanatory diagram of a communication method in accordance 
with an eleventh preferred embodiment of the present invention; 

5 Fig. 57 is a circuit diagram showing a semiconductor element in accordance with 

a twelfth preferred embodiment of the present invention; 

Fig. 58 is an illustration for explaining an operation of the semiconductor 
element of Fig. 57; 

Fig. 59 is a block diagram showing a semiconductor device in accordance with 
10 the twelfth preferred embodiment of the present invention; 

Fig. 60 is a circuit diagram showing part of the coding circuit of Fig. 59; 

Fig. 61 is a circuit diagram showing another example of the semiconductor 
element in accordance with the twelfth preferred embodiment of the present invention; 

Fig. 62 is a circuit diagram showing still another example of the semiconductor 
1 5 element in accordance with the twelfth preferred embodiment of the present invention; 

Fig. 63 is a block diagram showing a comparator circuit of the semiconductor 
element in accordance with the twelfth preferred embodiment of the present invention; 

Fig. 64 is an illustration for explaining the procedure of a communication system 
in the background art; and 

20 Fig. 65 is a block diagram showing a communication terminal in the background 

art. 



DESCRIPTION OF THE PREFERRED EMBODIMENTS 
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First of all, explanation on a term used in the present specification will be 
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presented. In the present specification, "coincidence" of codes is not limited to complete 
coincidence, but includes approximation within a predetermined range. 

[1. The First Preferred Embodiment] 

5 In the first preferred embodiment, description will be made on a semiconductor 

device having a constitution in which an identification code inherent in one of two 
semiconductor substrate is stored in the other semiconductor substrate, which makes it 
possible to prevent a fraudulent use through replacement of the semiconductor substrate, 
and a terminal device as an appliance of the semiconductor device. 

10 

[1.1. Semiconductor Device] 

Fig. 1 is a block diagram showing a constitution of a semiconductor device in 
accordance with the first preferred embodiment of the present invention. This 
semiconductor device 600 comprises a code generation unit 400, a comparator circuit 403, 

15 a predetermined circuit 405 and a memory 601. The code generation unit 400, the 
comparator circuit 403 and the predetermined circuit 405 are formed in a semiconductor 
substrate CHI and the memory 601 is formed in another semiconductor substrate CH2. 
The semiconductor substrates CHI and CH2 may be either molded ones or bare chips, 
and mounted on a single circuit board or a plurality of circuit boards. 

20 The code generation unit 400 generates an identification code Cd inherent in the 

semiconductor substrate CHI. The memory 601 stores the identification code Cd 
generated by the code generation unit 400 as a memory code Co. The identification 
code Cd is transmitted from the code generation unit 400 to the memory 601 and written 
into the memory 60 1 before shipment of the semiconductor device 600 as a product. 

25 The comparator circuit 403 compares the identification code Cd generated by the 
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code generation unit 400 with the memory code Co read out from the memory 601, 
judges whether these codes coincide with each other or not and outputs an enable signal 
(or a judgement signal) En representing the judgment result. To judge complete 
coincidence, the comparator circuit 403 may be a conventionally well-known comparator 
5 which judges whether the difference between the two codes is zero or not. To obtain 
approximation within a predetermined range, the comparator circuit 403 has only to 
compare the magnitude of difference of these codes with a predetermined reference value. 
The magnitude of difference can be estimated by numeral value of difference or the 
number of bits which are different between the codes. Further, there may be a 
10 constitution of the semiconductor device 600 where the reference value can be inputted 

from the outside and a user of the semiconductor device 600 can set the reference value to 
a desired value. 

The predetermined circuit 405 consists of a plurality of circuit elements to 
achieve a predetermined function and includes a circuit portion which selectively comes 
1 5 into an active state or inactive state on the basis of the enable signal En outputted from the 

comparator circuit 403. The communication circuit 907 of Fig. 65 is an example of the 
predetermined circuit 405. 

In the semiconductor device 600 having the above constitution, only when the 
identification code Cd generated by the code generation unit 400 and the memory code 
20 Co read out from the memory 601 coincide with each other, all the portions of the 
predetermined circuit 405 operate. Therefore, by using the predetermined circuit 405 as 
part of the circuits to achieve functions of an appliance, it is possible to enable or disable 
a predetermined operation of the appliance. If it is intended that the semiconductor 
substrate CHI or CH2 is replaced with one other semiconductor substrate for fraudulent 
use of the appliance, the appliance can not perform a predetermined operation since the 
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identification code Cd and the memory code Co do not coincide with each other. Thus, 
the fraudulent use of the appliance incorporating the semiconductor device 600 through 
replacement of the semiconductor substrate can be prevented. 

There may be another constitution where the code generation unit 400 and the 
5 comparator circuit 403 are formed in a single semiconductor substrate CH3 and the 
predetermined circuit 405 is formed in one other semiconductor substrate. In the 
constitution where the predetermined circuit 405 is formed in the single semiconductor 
substrate CHI together with the code generation unit 400 and the comparator circuit 403, 
however, the enable signal En inputted from the comparator circuit 403 to the 
10 predetermined circuit 405 can not be inputted from the outside. Therefore, the barrier 
(security) against the fraudulent use advantageously becomes higher. 

Further, there may be still another constitution where the comparator circuit 403 
is formed in a semiconductor substrate other than the semiconductor substrate in which 
the code generation unit 400 is formed. In the constitution where the comparator circuit 
15 403 is formed in the signal semiconductor substrate CHI or CH3 together with the code 

generation unit 400, however, the identification code Cd inputted from the code 
generation unit 400 to the comparator circuit 403 can not be fraudulently changed from 
the outside. Therefore, the barrier against the fraudulent use advantageously becomes 
higher. 

20 Furthermore, there may be yet another constitution where the semiconductor 

device 600 does not comprise the predetermined circuit 405. In this case, the 
predetermined circuit 405 has only to be formed in the appliance separately from the 
semiconductor device 600. Alternately, there may be another constitution of the 
appliance where the enable signal En is taken out of the appliance and the active/inactive 
25 state of the appliance is directed from the outside in accordance with the value of the 
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enable signal En. A terminal device of the third preferred embodiment described later is 
an example of this type of appliance. 

Furthermore, there may be a further constitution where the semiconductor device 
600 comprise neither the predetermined circuit 405 nor the comparator circuit 403. In 
5 this case, the predetermined circuit 405 and the comparator circuit 403 have only to be 
formed in the appliance separately from the semiconductor device 600. Alternately, 
there may be still another constitution of the appliance where the identification code Cd 
and the memory code Co are taken out of the appliance and the active/inactive state of the 
appliance is directed from the outside in accordance with the values of the identification 
10 code Cd and the memory code Co. A terminal device of the fourth preferred 
embodiment described later is an example of this type of appliance. 

[1.2. Code Generation Unit] 

Fig. 2 is a block diagram showing a preferable internal constitution of the code 
1 5 generation unit 400. In the example of Fig. 2, the code generation unit 400 comprises a 
semiconductor element 401 and a coding circuit 402. The coding circuit 402 reads the 
electric property of the semiconductor element 401 as an analog signal An and converts it 
into a digital signal. The digital signal obtained by the conversion is outputted as the 
identification code Cd. 

20 As the electric property of the semiconductor element 401 selected is a property 

which varies from one semiconductor element 401 to another. The identification code 
Cd, which is generated as a value which varies from one semiconductor element 401 to 
another, is inherent in the semiconductor substrate in which the code generation unit 400 
is formed. Since the semiconductor elements 401 manufactured through the same 
25 process can be used among a lot of mass-produced semiconductor devices 600, the 
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manufacturing process of the semiconductor device 600 can be simplified. Further, 
since the electric property of the semiconductor element 401 on which the identification 
code Cd is based can not be changed from the outside, the barrier against the fraudulent 
change of the identification code Cd is advantageously high. 

5 The semiconductor element 40 1 has polycrystalline substance for example, and a 

property which varies (i.e. disperses) with variation (i.e. dispersion) in crystal structures 
of the polycrystalline substances can be used as the electric property. This Example will 
be described later with reference to Figs. 3 to 6. Further, the semiconductor element 401 
comprises a MOSFET for example, and the variation in threshold values caused by 
1 0 variation in impurity concentrations of the impurity diffusion regions may be used. 

Fig. 3 is a plan view showing a preferable example of the semiconductor element 
401. Fig. 4 is a cross section taken along the line A-A of Fig. 3. In this example, the 
semiconductor element 401 has a thin-film transistor (hereinafter, abbreviated as TFT) 
101 and a semiconductor layer 1060 including a channel region of the TFT 101 is formed 
15 as a polycrystalline substance. Further, though a semiconductor layer 1 formed as an 
intermediate in the manufacturing process of the semiconductor element 401 is shown for 
easy illustration, the semiconductor layer 1 is selectively etched in the manufacturing 
process, being patterned into the semiconductor layer 1 060 in the semiconductor element 
401 as a finished product. 

20 In the TFT 101, a gate electrode 11 is selectively formed on an insulating film 12 

and a whole surface of the insulating film 12 and the gate electrode 1 1 is covered with an 
insulating film 10. On the insulating film 10, the semiconductor layer 1 is formed. 
Discussing exemplary materials for these constituent elements, the insulating film 12 is 
made of silicon oxide, the gate electrode 1 1 is made of polysilicon doped with impurity, 
25 the insulating film 1 0 is made of silicon oxide such as TEOS and the semiconductor layer 
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1 is mainly made of silicon. 

In the semiconductor layer 1, a channel region 2 positioned above the gate 
electrode 1 1 , a source region 3 and a drain region 4 which sandwich the channel region 2 
are formed. A portion of the insulating film 10 in contact with the channel region 2 
5 serves as a gate insulating film. In the examples of Figs. 3 and 5, the conductivity type 
of the channel region 2 is n type and the conductivity type of the source region 3 and the 
drain region 4 is p type. Specifically, the TFT 101 is formed as a p-channel type MOS 
TFT, as an example. Needless to say, the TFT 101 may be formed as an n-channel type 
MOS TFT. 

10 The semiconductor layer 1 is formed as a polycrystalline semiconductor layer, 

and as shown in Fig. 3, includes numberless grains 5 and a grain boundary 6 which is 
positioned at an interface therebetween and has crystal disturbance. A crystal 
orientation is uniform in each crystal grain 5, while the crystal orientations are generally 
different among different crystal grains 5. The size and arrangement of the grains 5 are 
15 random and vary in the process of forming the semiconductor layer 1. Specifically, even 
when a lot of TFTs 101 are manufactured through the same manufacturing process, the 
crystal structure of the semiconductor layer 1 varies from one TFT 1 0 1 to another. 

As a result, assuming that the TFT 101 represents one unity and a TFT 102 is 
distinguished from the TFT 101 as a unity different from the TFT 101 and manufactured 
20 through the same process as that of the TFT 101 as shown in Fig. 5, the amount of grain 
boundaries 6 occupying the channel region 2 in the TFT 101 is not equal to that in the 
TFT 102. Fig. 5 shows an example of the TFT 102 which contains less grain boundaries 
6 in the channel region 2 than the TFT 1 . 

As to the polycrystalline TFT, it is known that its property varies with the 
25 amount of grain boundaries 6 contained in the channel region 2. This is shown in, e.g., 
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IEEE Transactions on Electron Devices, Vol. 45, No. 1, January (1998), pp. 165 - 172 
(document 3). Specifically, as Fig. 6 shows the relationship between a gate voltage Vg 
and a drain current Id of the TFTs 101 and 102, the drain current Id in the TFT 101 in 
which more grain boundaries 6 are contained in the channel region 2 is smaller under the 
5 same gate voltage VgO than that in the TFT 102 in which less grain boundaries 6 are 
contained in the channel region 2 (Ida < Idb). 

Therefore, the variation in the crystal structure of the polycrystalline substance 
of the TFT 101 can be used for identification of the semiconductor substrate. Since the 
electric property which is different from one semiconductor substrate to another is caused 
10 by the variation in the crystal structure of the polycrystalline substance, the electric 
property can not be rewritten from the outside, unlike the identification code which is 
recorded in the flash memory 908 (Fig. 65). Therefore, it is possible to enhance the 
security level against the fraudulent use of the appliance. 

Moreover, unlike the technique to program the identification code into the flash 
15 memory 908, a labor of programming is not needed. Further, since the property different 
from one semiconductor substrate to another can be obtained through the same 
manufacturing process unlike the technique to record the identification code into the mask 
ROM, the manufacturing process is simplified and the number of process steps and the 
manufacturing cost can be reduced. Furthermore, the variation in the crystal structures 
20 of the polycrystalline substances is large, and the variation in the electric properties 
caused by the variation in the crystal structures is accordingly large. Therefore, it is 
possible to ensure a large range of variation in the identification codes Cd. In other 
words, it is easy to prevent coincidence of the identification codes among a lot of mass- 
produced semiconductor devices 600. 

25 Further, though the manufacturing process is complicated, there may be another 
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structure where only the channel region 2 is formed of polycrystalline semiconductor and 
the source region 3 and the drain region 4 are formed of single crystalline semiconductor, 
and also in this case, the property varies randomly. 

The electric property of the semiconductor element 401 shown in Figs. 2 to 6 
5 may be subtlely changed by the change of temperature and time. It is accordingly 
supposed that the identification code Cd does not hold a completely constant value and 
varies to some degree. To solve this problem, the comparator circuit 403 has to judge 
the coincidence of the identification codes within a margin considering the change of the 
identification code Cd. 

10 As an example of the semiconductor element 401 having the polycrystalline 

substance, besides the TFTs shown in Figs. 3 to 6, other elements such as a resistive 
element having the polycrystalline substance and a capacitive element having the 
polycrystalline substance can also be used. Further, the semiconductor element 401 may 
have a plurality of TFTs and the like. As the number of TFTs increases, the variation in 
15 the identification codes Cd becomes larger. This will be discussed later in detail in the 
twelfth preferred embodiment. 

[1.3. Example Using OTPROM] 

Fig. 7 is a block diagram showing another preferable internal constitution of the 
20 code generation unit 400. In the example of Fig. 7, the code generation unit 400 
comprises an OTP (One Time Programmable) ROM 602 which is a nonvolatile memory 
programmable only one time. Before the shipment of the semiconductor device 600, the 
identification code Cd is written in the OTPROM 602. After the semiconductor device 
600 is supplied for a user thereafter, it is technically impossible to rewrite the 
25 identification code Cd written in the OTPROM 602. In other words, in the example of 
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Fig. 7, a high technical barrier against the fraudulent use of the identification code Cd 
generated by the code generation unit 400 is advantageously achieved. 

The OTPROM is suitable for the use in the memory 601 as shown in Fig. 8, as 
well as in the code generation unit 400. In the example of Fig. 8, the memory 601 
5 comprises the OTPROM 602. Before the shipment of the semiconductor device 600, the 
identification code Cd transmitted from the code generation unit 400 is written in the 
OTPROM 602 in the memory 601 as the memory code Co. After the semiconductor 
device 600 is supplied for a user thereafter, it is technically impossible to rewrite the 
memory code Co written in the OTPROM 602. In other words, in the example of Fig. 8, 
10 a high technical barrier against the fraudulent use of the memory code Co stored in the 
memory 601 is advantageously achieved. It is also thereby possible to prevent a 
fraudulent use through replacement of the semiconductor substrate in which the code 
generation unit 400 is formed and rewriting of the memory code Co stored in the memory 
601 at the same time so as to coincide with the identification code Cd of a new 
1 5 semiconductor substrate. 

[1.4. Terminal Device] 

Fig. 9 is a block diagram showing a constitution of a terminal device as an 
appliance of the semiconductor device 600. The terminal device 1001 is constituted as a 
20 cellular phone. A semiconductor device 1002 in the terminal device 1001 is an example 
of the semiconductor device 600 shown in Fig. 1 and comprises a communication circuit 
405a as the predetermined circuit 405. 

Though it is preferable that the code generation unit 400, the comparator circuit 
403 and the communication circuit 405a are formed in a single semiconductor substrate 
25 CHI 00, only the comparator circuit 403 and the code generation unit 400 may be formed 
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in a single semiconductor substrate CHI 02, or only the code generation unit 400 may be 
formed in a single semiconductor substrate. In any case, a memory 654 storing the 
memory code Co is formed in a semiconductor substrate CH51 different from the 
semiconductor substrate in which the code generation unit 400 is formed. 

5 An communication common carrier (referred to as "station" as necessary) 

equipment 655 which is an equipment of the communication common carrier through 
which the communication of the terminal device 1001 is performed comprises a 
communication circuit 656. Between the communication circuit 405a and the 
communication circuit 656, a communication signal whose contents are voice, data and 
10 the like is transmitted by wireless (with radio wave). The terminal device 1001 and the 
communication common carrier equipment 655 constitute a communication system 1000. 

Fig. 10 is a block diagram showing an exemplary internal constitution of the 
communication circuit 405a. In the communication circuit 405a included in the terminal 
device 1001 using radio wave, a well-known radio frequency circuit 462 and an 
15 intermediate frequency circuit 463 are interposed between an antenna and a signal 
processing circuit (baseband circuit) 900. The signal processing circuit 900 comprises a 
transmitter circuit 460 and a receiver circuit 461, and a communication signal Dt is 
received by the receiver circuit 461 and transmitted by the transmitter circuit 460. 

In the example of Fig. 10, only the transmitter circuit 460 is turned on and off by 
20 the enable signal En. Specifically, when the comparator circuit 403 makes a judgment 
of noncoincidence, a transmission function is stopped. There may be another 
constitution of the communication circuit 405 where only the receiver circuit 461 or both 
the transmitter circuit 460 and the receiver circuit 461 are turned on and off on the basis 
of the enable signal En. 

25 Fig. 11 is a flowchart of procedure for the use of the terminal device 1001 for 
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communication. At first, the semiconductor device 600 (more specifically, a 
semiconductor device 1001) as a part is manufactured (S201). During or before the last 
step, the identification code Cd is recorded into the memory 601 as the memory code Co 
(S202). After that, the semiconductor device 600 is supplied for a phone maker and the 
5 terminal device 1001 is assembled by the phone maker (S203). The finished terminal 
device 1001 is supplied for a user (S204), and served for communication by the user 
(S205). 

The steps S206 to S210 show a procedure of communication using the terminal 
device 1001, i.e., an internal flow of the step S205. When the communication is started, 
10 the terminal device 1001 reads out the memory code Co from the memory 601 (S206). 
Subsequently, the comparator circuit 403 compares the identification code Cd with the 
memory code Co, and generates the enable signal En representing the result of judgment 
on whether these codes coincide with each other or not (S207). 

When the enable signal En indicates coincidence of the codes (S208), the 
15 communication circuit 405a maintains the communication function to continue the 
communication (S209). On the other hand, the enable signal En indicates 
noncoincidence of the codes (S208), the communication circuit 405a stops at least one of 
the transmission function and the reception function to disable the communication (S210). 
When the communication is completed, the procedure is ended. 

20 Thus, since at least one of the functions of the communication circuit 405a is 

stopped in the terminal device 1001 when the enable signal En indicates noncoincidence, 
it is possible to automatically suppress a fraud of using the terminal device for 
communication through replacement of the semiconductor substrate, by the action of the 
terminal device 1001 itself without a procedure of the communication common carrier 
equipment 655. 
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Further, though the cellular phone performing communication by wireless is 
shown as an example of the terminal device in the above discussion, this preferred 
embodiment can be applied to a wire phone performing communication through a 
communication cable. Furthermore, this preferred embodiment can also be applied to 
5 various terminal devices, not limited to the phone. 

Fig. 12 illustrates various terminal devices to which this preferred embodiment 
can be applied and various servers with which the terminal devices communicate. For 
example, the terminal device may be a vehicle terminal communicating with a highway 
control system which automatically controls payment of highway toll and the like, or an 
10 IC card or a personal computer each of which communicates with an ATM system in a 
bank to draw or deposit cash. 

[2. The Second Preferred Embodiment] 

Though the single semiconductor substrate is identified by the inherent 
15 identification code in the semiconductor device and the terminal device of the first 
preferred embodiment, a plurality of semiconductor substrate are identified in the second 
preferred embodiment. 

Fig. 13 is a block diagram showing a constitution of a semiconductor device in 
accordance with the second preferred embodiment of the present invention. In the 
20 semiconductor device 620 of Fig. 13, the memory 601 is formed in a semiconductor 
substrate CH4 together with the code generation unit 400, the comparator circuit 403 and 
the predetermined circuit 405, and the code generation unit 400 and the comparator 
circuit 403 are formed in a semiconductor substrate CH5 together with the memory 601. 
The code generation unit 400 formed in the semiconductor substrate CH4 generates an 
25 identification code Cdl inherent in the semiconductor substrate CH4 and the code 




50 



generation unit 400 formed in the semiconductor substrate CH5 generates an 
identification code Cd2 inherent in the semiconductor substrate CH5. 

The memory 601 formed in the semiconductor substrate CH4 stores the 
identification code Cd2 transmitted from the code generation unit 400 formed in the 
5 semiconductor substrate CH5 as a memory code Co2, and the memory 601 formed in the 
semiconductor substrate CH5 stores the identification code Cdl transmitted from the code 
generation unit 400 formed in the semiconductor substrate CH4 as a memory code Col. 
Specifically, the identification codes Cdl and Cd2 inherent in the semiconductor 
substrates CH4 and CH5, respectively, are stored in the memories 601 formed in the other 
1 0 semiconductor substrates. 

The comparator circuit 403 formed in the semiconductor substrate CH4 
compares the identification code Cdl with the memory code Col, and the comparator 
circuit 403 formed in the semiconductor substrate CH5 compares the identification code 
Cd2 with the memory code Co2. The predetermined circuit 405 formed in the 
15 semiconductor substrate CH4 includes a circuit portion which selectively comes into an 
active state or an inactive state on the basis of a pair of enable signals Enl and En2 
outputted form the two comparator circuits 403. The predetermined circuit 405 is a 
communication circuit similar to the communication circuit 405a of Fig. 10, for example, 
and has a constitution to stop the operation of the transmitter circuit 460 when at least one 
20 of the enable signals Enl and En2 indicates noncoincidence of the codes. This further 
enhances the barrier against the fraudulent use through replacement of the semiconductor 
substrate. 

The number of semiconductor substrates to which the inherent identification 
codes Cd are allotted may be three or more. For example, there may be another 
25 constitution where the code generation unit 400 for generating the inherent identification 
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code Cd and the memory 601 are formed in each of three semiconductor substrates and 
the memory 601 stores the identification code Cd transmitted from the code generation 
unit 400 formed in the semiconductor substrate other than the semiconductor substrate in 
which the memory 601 itself is formed. Alternately, at least part of the three memories 
5 601 may be formed in a semiconductor substrate other than the three semiconductor 

substrates in which the code generation units 400 are formed. 

As the number of semiconductor substrates given the identification codes Cd, i.e., 
semiconductor substrates comprising the code generation units 400 increases, a higher 
barrier against the fraudulent use of the appliance can be obtained. Further, since the 
10 memory 601 is formed only in the semiconductor substrate which comprises the code 
generation unit 400, it is possible to suppress the number of semiconductor substrates to 
the minimum. In the semiconductor device 620 of Fig. 13, especially, a higher barrier 
against the fraudulent use can be advantageously obtained while suppressing the number 
of semiconductor substrates to two, which is equal to the number of semiconductor 
1 5 substrates in the semiconductor device 600 of Fig. 1 . 

Fig. 14 is a block diagram showing a constitution of the terminal device as an 
appliance of the semiconductor device 620. The terminal device 1011 works as a 
cellular phone and constitute a communication system 1010 with the communication 
common carrier equipment 655. A semiconductor device 1012 incorporated in the 
20 terminal device 1011 is an example of the semiconductor device 620 shown in Fig. 1 3 and 
comprises the communication circuit 405a as the predetermined circuit 405. The 
communication circuit 405a stops its function when at least one of the enable signals Enl 
and En2 indicates noncoincidence of the codes. 

Though it is preferable that the code generation unit 400 for generating the 
25 identification code Cdl, the comparator circuit 403 for performing a comparison of the 
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identification code Cdl, the memory 601 for storing the memory code Co2 and the 
communication circuit 405a are formed in a single semiconductor substrate CHI 03, there 
may be another constitutions where only the comparator circuit 403, the memory 601 and 
the code generation unit 400 are formed in a single CH11 and where only the code 
5 generation unit 400 is formed in a single semiconductor substrate CGI 04. Further, it is 
preferable that the memory 601 for storing the memory code Col is formed in a single 
semiconductor substrate CHI 3 together with the code generation unit 400 for generating 
the identification code Cd2 and the comparator circuit 403 for performing a comparison 
of the identification code Cd2. 

10 Fig. 15 is a flowchart of procedure for the use of the terminal device 1011. At 

first, the semiconductor device 620 (more specifically, the semiconductor device 1012) as 
a part is manufactured (S241). During or before the final stage of the step S241, the 
identification codes Cdl and Cd2 of the semiconductor substrates are recorded into the 
memories 601 of the other semiconductor substrates as the memory codes Col and Co2 
15 (S242). After that, the semiconductor device 620 is supplied for a phone maker and the 

terminal device 1011 is assembled by the phone maker (S243). The finished terminal 
device 1011 is supplied for a user (S244), and served for communication by the user 
(S245). 

The steps S246 to S250 show a procedure of communication using the terminal 
20 device 1011, i.e., an internal flow of the step S245. When the communication is started, 
the terminal device 1011 reads out the memory codes Col and Co2 from the two 
memories 601 (S246). Subsequently, one of the comparator circuit 403 compares the 
identification code Cdl and the memory code Col to output the enable signal Enl 
representing the judgment result on whether these codes coincide with each other or not, 
25 and at the same time, the other of the comparator circuits 403 compares the identification 
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code Cd2 and the memory code Co2 to output the enable signal En2 representing the 
judgment result on whether these codes coincide with each other or not (S247). 

When both the enable signals Enl and En2 indicate coincidence of the codes 
(S248), the communication circuit 405a maintains the communication function to 
5 continue the communication (S249). On the other hand, at least one of the enable 
signals Enl and En2 indicates noncoincidence of the codes (S248), the communication 
circuit 405a stops at least one of the transmission function and the reception function to 
disable the communication (S250). When the communication is completed, the 
procedure is ended. 

10 

[3. The Third Preferred Embodiment] 

In the third preferred embodiment, discussion will be made on a terminal device 
using a portion with the predetermined circuit removed in the semiconductor device of the 
first or second preferred embodiment. 

15 Fig. 16 is a block diagram showing a constitution of a terminal device in 

accordance with the third preferred embodiment of the present invention. The terminal 
device 1001 is characteristically different from the terminal device 1001 of the first 
preferred embodiment shown in Fig. 9 in that the communication circuit 405a does not 
select the active state or the inactive state on the basis of the enable signal En which is 
20 transmitted from the comparator circuit 403 but merely transmits the enable signal En to 
the communication common carrier equipment 655 as part of the communication signal. 

The flow of procedure for the use of the terminal device 1001 of Fig. 16 for 
communication is similar to as that shown in Fig. 1 1 . The internal flow of the step S205, 
however, is replaced with the procedure of the step SI 000 shown in Fig. 17. When the 
25 step SI 000 starts, the terminal device 1001 reads out the memory code Co from the 
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memory 601 (S206). Subsequently, the comparator circuit 403 compares the 
identification code Cd and the memory code Co, and generates the enable signal En 
representing the result of judgment on whether these codes coincide with each other or 
not (S207). 

5 The enable signal En is transmitted to the communication common carrier 

equipment 655 through the communication circuit 405a (S208, SI 001, SI 003). In other 
words, when the enable signal En indicates coincidence of the codes (S208), a 
predetermined value indicating coincidence of the codes is transmitted as the enable 
signal En (SI 001), and when the enable signal En indicates noncoincidence of the codes 
10 (S208), the predetermined value is not transmitted (SI 003). 

The communication common carrier equipment 655 performs an authentication 
that the user of the terminal device 1001 is authorized when the enable signal En indicates 
coincidence of the codes and does not perform the authentication when the enable signal 
En indicates noncoincidence of the codes. The communication common carrier 
15 equipment 655 permits the communication to continue the communication process 
(SI 002) when the authentication is performed, and does not permit the communication to 
stop the communication process (SI 004) when the authentication is not performed, for 
example. 

Thus, in the terminal device 1001 of Fig. 16, the enable signal En can be served 
20 for judgment in the authentication performed by the communication common carrier 
equipment 655, and the fraudulent use through replacement of the semiconductor 
substrate is thereby omitted in the authentication to achieve the authentication with high 
accuracy. Further, besides continuing or stopping the communication, providing or not- 
providing some service such as permitting or not-permitting a business transaction can 
25 follow the authentication. Alternately, there may be another case where only recording 
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of the judgment matter for authentication is performed. Specific examples will be 
discussed in the later preferred embodiments. 

Fig. 1 8 is a block diagram showing another constitution of the terminal device in 
accordance with the third preferred embodiment of the present invention. The terminal 
5 device 1011 is characteristically different from the terminal device 1011 of the second 
preferred embodiment shown in Fig. 14 in that the communication circuit 405a does not 
select the active state or the inactive state on the basis of the enable signals Enl and En2 
which are transmitted from the comparator circuits 403 but merely transmits the enable 
signals Enl and En2 to the communication common carrier equipment 655 as part of the 
10 communication signal. 

The flow of procedure for the use of the terminal device 1011 of Fig. 18 for 
communication is similar to that shown in Fig. 15. The internal flow of the step S245, 
however, is replaced with the procedure of the step S1010 shown in Fig. 19. When the 
step S1010 starts, the terminal device 1011 reads out the memory codes Col and Co2 
15 from the two memories 601 (S246). Subsequently, one of the comparator circuits 403 
compares the identification code Cdl and the memory code Col to output the enable 
signal Enl representing the judgment result on whether these codes coincide with each 
other or not, and at the same time, the other of the comparator circuits 403 compares the 
identification code Cd2 and the memory code Co2 to output the enable signal En2 
20 representing the judgment result on whether these codes coincide with each other or not 
(S247). 

The enable signals Enl and En2 are transmitted to the communication common 
carrier equipment 655 through the communication circuit 405a (S248, S1001, S1003). 
In other words, when both the enable signals Enl and En2 indicate coincidence of the 
25 codes (S248), predetermined values indicating coincidence of the codes are transmitted 
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(S1001) as the enable signals Enl and En2, and when at least one of the enable signals 
Enl and En2 indicates noncoincidence of the codes (S248), the predetermined values are 
not transmitted (SI 003). 

The communication common carrier equipment 655 performs an authentication 
5 that the user of the terminal device 1001 is authorized when both the enable signals Enl 
and En2 indicate coincidence of the codes and does not perform the authentication when 
at least one of the enable signals Enl and En2 indicates noncoincidence of the codes. 
The communication common carrier equipment 655 permits the communication to 
continue the communication process (SI 002) when the authentication is performed, and 
1 0 does not permit the communication to stop the communication process (S 1 004) when the 
authentication is not performed, for example. 

Thus, in the terminal device 101 1 of Fig. 18, the enable signals Enl and En2 can 
serve for judgment in the authentication performed by the communication common 
carrier equipment 655, and the fraudulent use through replacement of the semiconductor 
15 substrate is thereby omitted in the authentication to achieve the authentication with high 
accuracy. Further, since the two enable signals Enl and En2 are used as judgment 
matters in the authentication, the authentication with still higher accuracy can be achieved 
than in the terminal device 1001 of Fig. 16. 

20 [4. The Fourth Preferred Embodiment] 

In the fourth preferred embodiment, discussion will be made on a terminal 
device using a portion with the predetermined circuit and the comparator circuit removed 
in the semiconductor device of the first or second preferred embodiment. 

Fig. 20 is a block diagram showing a constitution of a terminal device in 
25 accordance with the fourth preferred embodiment of the present invention. The 
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semiconductor device 652 in the terminal device 801 is characteristically different from 
the terminal device 1 002 of the first preferred embodiment shown in Fig. 9 in that the 
comparator circuit 403 is removed and the communication circuit 405a merely transmits 
the identification code Cd and the memory code Co to the communication common 
5 carrier equipment 655 as part of the communication signal. 

The communication common carrier equipment 655 of Fig. 20 comprises a 
judgment circuit 657 and a customer database memory 658 besides the communication 
circuit 656. The communication common carrier equipment 655 and the terminal device 
801 constitute the communication system 800. 

10 The flow of procedure for the use of the terminal device 801 for communication 

is similar to that shown in Fig. 11. The internal flow of the step S205, however, is 
replaced with the procedure of the step S260 shown in Fig. 21 . When the step 260 starts, 
the terminal device 801 transmits the identification code Cd and the memory code Co to 
the communication common carrier equipment 655 (S261). Accordingly, the 
1 5 communication circuit 656 in the communication common carrier equipment 655 receives 
the identification code Cd and the memory code Co (S262). 

Subsequently, the judgment circuit 657 in the communication common carrier 
equipment 655 compares the identification code Cd with the memory code Co and judges 
whether these codes coincide with each other or not to transmit the enable signal En 
20 indicating the judgment result to the communication circuit 656 (S263). When the 
enable signal En indicates coincidence (S264), the communication common carrier 
equipment 655 performs an authentication that the user of the terminal device 801 is 
authorized, and when the enable signal En indicates noncoincidence (S264), the 
communication common carrier equipment 655 does not perform the authentication. 
The communication common carrier equipment 655 permits the communication to 
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continue the communication process (S265) when the authentication is performed, and 
does not permit the communication to stop the communication process (S268) when the 
authentication is not performed, for example. 

Further, when it is instructed to record the identification code Cd and the 
5 memory code Co (S266), the identification code Cd and the memory code Co are 
recorded into the customer database memory 658 if the authentication is not performed 
(S267). Then, for example, after the communication process is stopped (S268), by 
checking the identification code Cd and the memory code Co with the content of the 
customer database memory 658 which is recorded in the past (S269), an unauthorized 
10 user is specified (S270). 

There may be another case where only recording of the identification code Cd 
and the memory code Co is performed (S267), without stopping the communication 
process, when the authentication is not performed. Further, there may be still another 
case where recording of the identification code Cd and the memory code Co is performed 
15 (S267) regardless of the authentication result. In the latter case, the procedure of the 

step S267 is performed between the steps S263 and S264 for example. 

Thus, in the terminal device 801 of Fig. 20, the identification code Cd and the 
memory code Co can be served for judgment in the authentication performed by the 
communication common carrier equipment 655, and the fraudulent use through 
20 replacement of the semiconductor substrate is thereby omitted in the authentication to 
achieve the authentication with high accuracy. 

Fig. 22 is a block diagram showing another constitution of the terminal device in 
accordance with the fourth preferred embodiment of the present invention. The 
semiconductor device 652 in the terminal device 811 is characteristically different from 
25 the terminal device 1012 of the second preferred embodiment shown in Fig. 14 in that the 
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comparator circuit 403 is removed and the communication circuit 405a merely transmits 
the identification codes Cdl and Cd2 and the memory codes Col and Co2 to the 
communication common carrier equipment 655 as part of the communication signal. 

The communication common carrier equipment 655 of Fig. 22 comprises the 
5 judgment circuit 657 and the customer database memory 658 besides the communication 
circuit 656. The communication common carrier equipment 655 and the terminal device 
811 constitute the communication system 810. 

The flow of procedure for the use of the terminal device 811 for communication 
is similar to that shown in Fig. 15. The internal flow of the step S245, however, is 
10 replaced with the procedure of the step S280 shown in Fig. 23. When the step 280 starts, 
the terminal device 811 transmits the identification codes Cdl and Cd2 and the memory 
codes Col and Co2 to the communication common carrier equipment 655 (S271). 
Accordingly, the communication circuit 656 in the communication common carrier 
equipment 655 receives the identification codes Cdl and Cd2 and the memory codes Col 
15 and Co2 (S272). 

Subsequently, the judgment circuit 657 in the communication common carrier 
equipment 655 compares the identification code Cdl with the memory code Col to judge 
whether these codes coincide with each other or not and compares the identification code 
Cd2 with the memory code Co2 to judge whether these codes coincide with each other or 
20 not. The judgment circuit 657 transmits the enable signal En indicating these judgment 
results to the communication circuit 656 (S273). When both the two comparison results 
indicate coincidence (S274), the communication common carrier equipment 655 performs 
an authentication that the user of the terminal device 811 is authorized, and when at least 
one of the two comparison results indicates noncoincidence (S274), the communication 
25 common carrier equipment 655 does not perform the authentication. The 
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communication common carrier equipment 655 permits the communication to continue 
the communication process (S275) when the authentication is performed, and does not 
permit the communication to stop the communication process (S278) when the 
authentication is not performed, for example. 

5 Further, when it is instructed to record the identification codes Cdl an Cd2 and 

the memory codes Col and Co2 (S276), the identification codes Cdl and Cd2 and the 
memory codes Col and Co2 are recorded into the customer database memory 658 if the 
authentication is not performed (S277). Then, for example, after the communication 
process is stopped (S278), by checking the identification codes Cdl and Cd2 and the 
10 memory codes Col and Co2 with the content of the customer database memory 658 
which is recorded in the past (S279), an unauthorized user is specified (S280). 

There may be another case where only recording of the identification codes Cdl 
and Cd2 and the memory codes Col and Co2 is performed (S277), without stopping the 
communication process, when the authentication is not performed. Further, there may 
15 be still another case where recording of the identification codes Cdl and Cd2 and the 
memory codes Col and Co2 is performed (S277) regardless of the authentication result. 
In the latter case, the procedure of the step S277 is performed between the steps S273 and 
S274 for example. 

Thus, in the terminal device 81 Tof Fig. 22, the identification codes Cdl and Cd2 
20 and the memory codes Col and Co2 can be served for judgment in the authentication 
performed by the communication common carrier equipment 655, and the fraudulent use 
through replacement of the semiconductor substrate is thereby omitted in the 
authentication to achieve the authentication with high accuracy. Further, since the two 
identification codes Cdl and Cd2 are used in the comparison, the authentication with still 
higher accuracy can be achieved than in the terminal device 801 of Fig. 20. 
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[5. The Fifth Preferred Embodiment] 

In the fifth preferred embodiment, the identification code Cd and the memory 
code Co are transmitted in an encrypted form between the semiconductor substrates in the 
5 semiconductor device of the first or second preferred embodiment. 

Fig. 24 is a block diagram showing a constitution of a semiconductor device in 
accordance with the fifth preferred embodiment of the present invention. In the 
semiconductor device 630 of Fig. 24, an encryption circuit 631, a decoder circuit 632 and 
a key generation unit 633 are formed in a semiconductor substrate CH20 or CH22 in 
1 0 which the code generation unit 400 is formed. 

The key generation unit 633 generates a key K for encryption. The key K is 
generated as a code inherent in the semiconductor substrate CH20 or CH22 like the 
identification code Cd. The encryption circuit 631 encrypts the identification code Cd 
generated by the code generation unit 400 on the basis of the key K generated by the key 
15 generation unit 633 into an identification code Cd# and transmits the identification code 
Cd# to the memory 601 formed in a semiconductor substrate CH21. The memory 601 
stores the encrypted identification code Cd# as an encrypted memory code Co#. 

The decoder circuit 632 reads out the memory code Co# stored in the memory 
601, decodes the memory code Co# into the memory code Co on the basis of the key K 
20 generated by the key generation unit 633 and supplies the memory code Co for the 
comparator circuit 403. The predetermined circuit 405 includes a circuit portion which 
selectively comes into an active state or an inactive state on the basis of the enable signal 
En outputted form the comparator circuit 403. 

Thus, since the identification code Cd and the memory code Co are transmitted 
25 in the encrypted form between the different semiconductor substrates in the 
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semiconductor device 630, neither the identification code Cd nor the memory code Co 
can be read out from the outside. Therefore, a higher barrier against the fraudulent use 
can be achieved. 

Fig. 25 is a block diagram showing an exemplary internal constitution of the key 

v' 

5 generation unit 633. In the example of Fig. 25, the key generation unit 633 comprises 
the OTPROM 602, and before the shipment of the semiconductor device 630, the key K is 
written in the OTPROM 602. Therefore, it is impossible to fraudulently change the key 
K generated by the key generation unit 633. Further, since the key K has been written at 
the shipment of the semiconductor device 630, the key K is prevented from leaking out to 
1 0 the user. 

Fig. 26 is a block diagram showing another internal constitution of the key 
generation unit 633. The key generation unit 633 of Fig. 26 comprises the 
semiconductor element 401 and the coding circuit 402 shown in Fig. 2. The coding 
circuit 402 reads out the electric property of the semiconductor element 401 as the analog 
15 signal An and converts it into the digital signal. The digital signal obtained by 
conversion is outputted as the key K. 

As the electric property of the semiconductor element 401 selected is a property 
which varies from one semiconductor element 401 to another. The key K, which is 
generated as a value which varies from one semiconductor element 401 to another, is 
20 inherent in the semiconductor substrate in which the key generation unit 633 is formed. 
Since it is not necessary to write the key K and the semiconductor elements 401 
manufactured though the same process can be used among a lot of mass-produced 
semiconductor devices 630, the manufacturing process of the semiconductor device 630 
can be simplified. Further, since the electric property of the semiconductor element 401 
25 on which the key K is based can not be changed from the outside, the barrier against the 
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fraudulent change of the key K is advantageously high. 

As illustrated in Figs. 3 to 6, the semiconductor element 401 has polycrystalline 
substance, and the electric property which varies with variation in crystal structures of the 
polycrystalline substances can be used. Since the variation in the crystal structures of 
5 the polycrystalline substances is large and the variation in the electric properties caused 
by the variation in the crystal structures is accordingly large, it is possible to ensure a 
large range of variation in the keys K. In other words, it is easy to prevent coincidence 
of the keys K among a lot of mass-produced semiconductor devices 630. 

Fig. 27 is a flowchart of procedure for the use of the terminal device 1001 of Fig. 
10 9 for communication when the semiconductor device 630 of Fig. 24 is used instead of the 

semiconductor device 1002 and the communication circuit 405a is used as the 
predetermined circuit 405 in the terminal device 1001. At first, the semiconductor 
device 630 as a part is manufactured (S301). During or before the last step, the 
encrypted identification code Cd# is recorded into the memory 601 as the memory code 
1 5 Co# (S302). After that, the semiconductor device 630 is supplied for a phone maker and 
the terminal device 1001 is assembled by the phone maker (S303). The finished 
terminal device 1001 is supplied for a user (S304), and served for communication by the 
user (S305). 

The steps S3 06 to S3 10 show a procedure of communication using the terminal 
20 device 1001, i.e., an internal flow of the step S305. When the communication is started, 
the terminal device 1001 reads out the memory code Co# from the memory 601 (S306). 
Subsequently, the decoder circuit 632 decodes the memory code Co# into the memory 
code Co and thereafter comparator circuit 403 compares the identification code Cd and 
the memory code Co, and generates the enable signal En representing the result of 
25 judgment on whether these codes coincide with each other or not (S307). 
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When the enable signal En indicates coincidence of the codes (S308), the 
communication circuit 405a maintains the communication function to continue the 
communication (S309). On the other hand, the enable signal En indicates 
noncoincidence of the codes (S308), the communication circuit 405a stops at least one of 
5 the transmission function and the reception function to disable the communication (S3 1 0). 
When the communication is completed, the procedure is ended. 

Fig. 28 is a block diagram showing another constitution of the semiconductor 
device in accordance with the fifth preferred embodiment of the present invention. The 
semiconductor device 635 of Fig. 28 has a constitution where the identification codes Cdl 
10 and Cd2 and the memory codes Col and Co2 are transmitted in an encrypted form 
between the two semiconductor substrates in the semiconductor device 620 of Fig. 13. 
Specifically, the encryption circuit 631, the decoder circuit 632 and the key generation 
unit 633 are each formed in both the two semiconductor substrates CH20 (or CH22) and 
CH23 in which the code generation unit 400, the comparator circuit 403 and the memory 
15 601 are formed. 

In the semiconductor substrate CH20 (or CH22), the key generation unit 633 
generates a key K1 inherent in the semiconductor substrate CH20 (or CH22), and the 
encryption circuit 631 encrypts the identification code Cdl into an identification code 
Cdl# on the basis of the key K1 and transmits the identification code Cdl# to the 
20 memory 601 in the semiconductor substrate CH23. The memory 601 in the 
semiconductor substrate CH23 stores the identification code Cdl# as a memory code 
Col#. The decoder circuit 632 in the semiconductor substrate CH20 (or CH22) reads 
out the memory code Col# from the memory 601, decodes the memory code Col# into 
the memory code Col on the basis of the key K1 and supplies the memory code Col for 
25 the comparator circuit 403. 
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In the semiconductor substrate CH23, the key generation unit 633 generates a 
key K2 inherent in the semiconductor substrate CH23, and the encryption circuit 631 
encrypts the identification code Cd2 into an identification code Cd2# on the basis of the 
key K2 and transmits the identification code Cd2# to the memory 601 in the 
5 semiconductor substrate CH20 (or CH22). The memory 601 in the semiconductor 
substrate CH20 (or CH22) stores the identification code Cd2# as a memory code Co2#. 
The decoder circuit 632 in the semiconductor substrate CH23 reads out the memory code 
Co2# from the memory 601, decodes the memory code Co2# into the memory code Co2 
on the basis of the key K2 and supplies the memory code Co 1 for the comparator circuit 
10 403. The predetermined circuit 405 includes a circuit portion which selectively comes 

into an active state or an inactive state on the basis of a pair of enable signals Enl and 
En2 outputted form the two comparator circuits 403 . 

Thus, since the identification codes Cdl and Cd2 and the memory codes Col and 
Co2 are transmitted in the encrypted form between the different semiconductor substrates 
15 in the semiconductor device 635, none of the identification codes Cdl and Cd2 and the 
memory codes Col and Co2 can be read out from the outside. Therefore, a higher 
barrier against the fraudulent use can be achieved. Since the two enable signals Enl and 
En2 are used like in the semiconductor device 620 of the second preferred embodiment 
(of Fig. 13), it is possible to achieve a higher barrier against the fraudulent use through 
20 replacement of the semiconductor substrate. 

Also when the number of semiconductor substrates in which the code generation 
units 400 are formed is three or more, by forming the encryption circuit 63 1 , the decoder 
circuit 632 and the key generation unit 633 in each of the semiconductor substrates, it is 
possible to transmit the identification codes and the memory codes in the encrypted form 
25 between the different semiconductor substrates. 
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Fig. 29 is a flowchart of procedure for the use of the terminal device 1011 for 
communication when the semiconductor device 635 of Fig. 28 is used instead of the 
semiconductor device 1012 and the communication circuit 405a is used as the 
predetermined circuit 405 in the terminal device 1011. At first, the semiconductor 
5 device 635 as a part is manufactured (S341). During or before the last step, the 
encrypted identification codes Cdl# and Cd2# are recorded into the memory 601 of the 
other semiconductor substrate as the memory codes Co#l and Co#2 (S342). After that, 
the semiconductor device 635 is supplied for a phone maker and the terminal device 1011 
is assembled by the phone maker (S343). The finished terminal device 1011 is supplied 
10 for a user (S344), and served for communication by the user (S345). 

The steps S346 to S350 show a procedure of communication using the terminal 
device 1011, i.e., an internal flow of the step S345. When the communication is started, 
the terminal device 1011 reads out the memory codes Col# and Co2# from the two 
memories 601 (S346). Subsequently, the decoder circuit 632 decodes the memory codes 
15 Col# and Co2# into the memory codes Col and Co2 and thereafter one of the comparator 
circuits 403 compares the identification code Cdl and the memory code Col to output the 
enable signal Enl representing the judgment result on whether these codes coincide with 
each other or not, and at the same time, the other of the comparator circuits 403 compares 
the identification code Cd2 and the memory code Co2 to output the enable signal En2 
20 representing the judgment result on whether these codes coincide with each other or not 
(S347). 

When both the enable signals Enl and En2 indicate coincidence of the codes 
(S348), the communication circuit 405a maintains the communication function to 
continue the communication (S349). On the other hand, at least one of the enable 
signals Enl and En2 indicates noncoincidence of the codes (S348), the communication 
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circuit 405a stops at least one of the transmission function and the reception function to 
disable the communication (S3 50). When the communication is completed, the 
procedure is ended. 

5 [6. The Sixth Preferred Embodiment] 

In the sixth preferred embodiment, discussion will be made on a constitution 
where a switching circuit for exclusively performing transmission of the encrypted 
identification code and input of the encrypted memory code is provided in the 
semiconductor device of the fifth preferred embodiment. 

10 Fig. 30 is a block diagram showing a constitution of a semiconductor device in 

accordance with the sixth preferred embodiment of the present invention. In the 
semiconductor device 640 of Fig. 30, a switching circuit 641 is formed in a 
semiconductor substrate CH40 or CH42 in which the code generation unit 400 is formed 
together with the encryption circuit 63 1 , the decoder circuit 632 and the key generation 
15 unit 633. The switching circuit 641 is inserted in a transmission path of the 
identification code Cd# transmitted from the encryption circuit 631 to the memory 601 
formed in a semiconductor substrate CH41 and a transmission path of the memory code 
Co# transmitted from the memory 601 to the decoder circuit 632, and exclusively 
performs the transmission of the identification code Cd# and the transmission of the 
20 memory code Co#. 

Even if a user short-circuits a terminal of the semiconductor substrate CH40 (or 
CH42) so that the identification code Cd# outputted from the encryption circuit 63 1 may 
be inputted directly to the decoder circuit 632 in an attempt to make a fraudulent use, the 
switching circuit 64 1 prevents the identification code Cd# from being inputted directly to 
25 the decoder circuit 642. In other words, even if the fraudulent use through short circuit 
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of the terminal is attempted, it is impossible to pretend that the identification code Cd and 
the memory code Co to be compared by the comparator circuit 403 coincide with each 
other. Thus, the semiconductor device 640 can also prevent the fraudulent use of the 
appliance through short circuit of the terminal of the semiconductor substrate. 

5 Another constitution where the switching circuit 641 is interposed between the 

code generation unit 400 and the encryption circuit 631 and between the comparator 
circuit 403 and the decoder circuit 632 can produce the same effect. In general, the 
switching circuit 64 1 has only to be inserted in the transmission path of the identification 
code Cd (Cd#) from the code generation unit 400 to the memory 60 1 and the transmission 
10 path of the memory code Co (Co#) from the memory 601 to the comparator circuit 403. 

Further, the switching circuit 641 can be applies to the semiconductor device 600 
of Fig. 1 which does not comprise the encryption circuit 631 etc. Specifically, in the 
semiconductor device 600 of Fig. 1, the switching circuit 641 may be formed in the 
semiconductor substrate CHI (or CH3) so as to be inserted in the transmission path of the 
15 identification code Cd from the code generation unit 400 to the memory 601 and the 
transmission path of the memory code Co from the memory 601 to the comparator circuit 
403. This can produce the same effect as in the semiconductor device 640 of Fig. 30. 

Furthermore, the switching circuit 641 can be applied to the semiconductor 
device 620 of Fig. 13 and the semiconductor device 635 of Fig. 28. In the 
20 semiconductor device 620 of Fig. 13, the switching circuit 641 is formed both in the 
semiconductor substrates CH4 (CH6) and CH5. In the semiconductor device 635 of Fig. 
28, the switching circuit 641 is formed both in the semiconductor substrates CH20 (or 
CH22) and CH23. 

25 [7. The Seventh Preferred Embodiment] 
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The key generation unit 633 comprising the semiconductor element 401 
discussed in the fifth preferred embodiment can be applied to a general terminal device 
which transmits and receives data to and from a host computer. The terminal device 
having such a constitution will be discussed in the seventh preferred embodiment. 

5 Fig. 31 is a block diagram showing a constitution of a terminal device in 

accordance with the seventh preferred embodiment of the present invention. A terminal 
device 821 and a host computer 825 connected thereto constitute a system 820 for 
transmitting and receiving data Dd therebetween. The terminal device 821 comprises a 
data input unit 822 for inputting the data Dd and a data output unit 823 for outputting the 
10 data Dd, and further comprises the encryption circuit 631, the decoder circuit 632 and the 
key generation unit 633. The key generation unit 633 generates the key K for encryption. 
The encryption circuit 63 1 encrypts the data Dd inputted by the data input unit 822 into 
data Dd# on the basis of the key K generated by the key generation unit 633 and transmits 
the data Dd# to the host computer 825. 

15 The host computer 825 stores the encrypted data Dd# in a memory 826 as data 

Do#. The decoder circuit 632 receives the data Do# stored in the memory 826, decodes 
the data Do# into the data Do on the basis of the key K generated by the key generation 
unit 633 and transmits the data Do to the data output unit 823. The data Do is equivalent 
to the data Dd. Thus, since the terminal device 82 1 transmits and receives the encrypted 
20 data to and from the host computer 825, the barrier against leakage of the information 
represented by the data is high. 

The internal constitution of the key generation unit 633 is shown in Fig. 26. 
Specifically, the key generation unit 633 generates the key K inherent in the terminal 
device by using the electric property which varies from one semiconductor element 401 to 
25 another. Therefore, since it is not necessary to write the key K in the manufacturing 




70 



process of the terminal device 821 and the semiconductor elements 401 manufactured 
through the same process can be used among a lot of mass-produced terminal devices 821, 
the manufacturing process of the terminal device 821 can be simplified. Further, since 
the electric property of the semiconductor element 401 on which the key K is based can 

5 not be changed from the outside, the barrier against the fraudulent change of the key K is 

advantageously high. 

Fig. 32 is a block diagram showing another constitution of the terminal device in 
accordance with the seventh preferred embodiment of the present invention. The 
terminal device of Fig. 32 is characteristically different from the terminal device 821 of 
10 Fig. 31 in that the key generation unit 633 is incorporated in an IC card 829 detachable 

from a main body portion 828. When the 1C card 829 is attached to the main body 

portion 828, the encryption circuit 631 and the decoder circuit 632 formed in the main 
body portion 828 are connected to the key generation unit 633. 

Since the key generation unit 633 is incorporated in the IC card 829 detachable 
15 from the main body portion 828, it is possible to use the same key K for a plurality of 
main body portions 828 installed away from one another by freely carrying the portable 
IC card 829. 

[8. The Eighth Preferred Embodiment] 

20 In the eighth preferred embodiment, discussion will be made on a constitution 

where the memory 654 storing the memory code Co is incorporated in an auxiliary 
portion detachable from a main body portion in the terminal device 801 of the fourth 
preferred embodiment. 

Fig. 33 is a block diagram showing a constitution of a terminal device in 
25 accordance with the eighth preferred embodiment of the present invention. The terminal 
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device is separated in a main body portion 651 and a battery charger 653 as an auxiliary 
portion, which is an equivalent to a device where a semiconductor substrate CH50 is 
incorporated into the main body portion 651 and a semiconductor substrate CH51 is 
incorporated into the battery charger 653 in the terminal device 801 of Fig. 20. The 
5 main body portion 651 comprises a rechargeable battery which is not shown, and the 
battery charger 653 charges the battery when attached to the main body portion 65 1 . 

When the battery charger 653 is attached to the main body portion 651, not only 
the battery is charged, but also the semiconductor device 652 having the semiconductor 
substrate CH50 is connected to the semiconductor substrate CH51. The communication 
10 circuit 405a transmits only identification code Cd, among the identification code Cd and 
the memory code Co, to the communication common carrier equipment 655 when the 
battery charger is not attached to the main body portion 651 and transmits both the 
identification code Cd and the memory code Co to the communication common carrier 
equipment 655 when the battery charger is attached to the main body portion 651. The 
15 communication common carrier equipment 655, the terminal device main body portion 
651 and the battery charger 653 constitute a communication system 650. 

Fig. 34 is a flowchart of procedure for the use of the terminal device of Fig. 33 
for communication. At first, the semiconductor device 652 as a part is manufactured 
(S501). After that, the semiconductor device 652 is supplied for a phone maker and the 
20 terminal device main body portion 651 is assembled by the phone maker (S502). In 
parallel to these steps, or before or after these steps, the memory 654 as a part is 
manufactured (S503), and the battery charger 653 is thereafter assembled by the phone 
maker (S504). 

When both the terminal device main body portion 651 and the battery charger 
25 653 are finished, the identification code Cd is recorded into the memory 654 as the 
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memory code Co (S505) and a set of the terminal device main body portion 651 and the 
battery charger 653 are supplied for a communication common carrier holding the 
communication common carrier equipment 655 (S506). Both the identification code Cd 
and the memory code Co are read out in any stage of the steps S501 to S506 and 
5 registered into the customer database memory 658 of the communication common carrier 
equipment 655 (S507). After that, the set of the terminal device main body portion 651 
and the battery charger 653 are supplied for a user (S508) and thereafter served for 
communication by the user (S509). 

Figs. 35 and 36 are flowcharts showing an internal procedure of the step S509 of 
10 Fig. 34. When the communication is started, if the terminal device is used not on 
charge, in other words, if the battery charger 653 is not attached to the main body portion 
651 (S520), the terminal device main body portion 651 transmits the identification code 
Cd to the communication common carrier equipment 655 (S521). The communication 
common carrier equipment 655 accordingly receives the identification code Cd through 
1 5 the communication circuit 656 (S522). 

Subsequently, in the communication common carrier equipment 655, the 
judgment circuit 657 compares the identification code Cd with the registered 
identification code Cd and judges whether these codes coincide with each other or not to 
transmit the enable signal En representing the judgment result to the communication 
20 circuit 656 (S523). When the enable signal En indicates coincide of the codes (S524), 
the communication common carrier equipment 655 performs an authentication that the 
user of the terminal device main body portion 651 is authorized and when the enable 
signal En indicates noncoincidence of the codes (S524), the communication common 
carrier equipment 655 does not perform the authentication. The communication 

common carrier equipment 655 permits the communication to continue the 
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communication process (S525) when the authentication is performed, and does not permit 
the communication to stop the communication process (S526) when the authentication is 
not performed, for example. 

If the terminal device is used on charge, in other words, if the main body portion 
5 651 is used for communication while being connected to the battery charger 653 (S520, 

S530), the terminal device main body portion 651 transmits both the identification code 
Cd and the memory code Co to the communication common carrier equipment 655 
(S531). The communication common carrier equipment 655 accordingly receives the 
identification code Cd and the memory code Co through the communication circuit 656 
10 (S532). 

Subsequently, in the communication common carrier equipment 655, the 
judgment circuit 657 compares the identification code Cd with the registered 
identification code Cd to judge whether these codes coincide with each other or not and at 
the same time, compares the memory code Co with the registered memory code Co to 
15 judge whether these codes coincide with each other or not. The judgment circuit 657 
transmits the enable signal En representing the two judgment results to the 
communication circuit 656 (S533). 

When it is recognized on the basis of the enable signal En that both the judgment 
results indicate coincidence of the codes (S534), the communication common carrier 
20 equipment 655 performs an authentication that the user of the terminal device is 
authorized and when it is recognized that at least one of the judgment results indicates 
noncoincidence of the codes (S534), the communication common carrier equipment 655 
does not perform the authentication. Since the judgment is made on the basis both of the 
two codes Cd and Co in the step S533, the accuracy of the judgment in the step S533 is 
higher than that in the step S523. In other word, the authentication made on the basis of 
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the judgment in the step S533 is a high-level authentication, proving that the terminal 
device is used validly with higher accuracy than the authentication made on the basis of 
the judgment in the step S523. 

Therefore, the communication common carrier equipment 655 can selectively 
5 use the two authentications of different levels depending on the importance. As an 
example, if the authentication is performed on the basis of the judgment in the step S533, 
when the terminal device is used for communication (S535), the communication common 
carrier equipment 655 not only permits the communication to continue the 
communication process (S536), but also records the communication charge for the 
1 0 communication therebefore (from the previous authentication based on the judgment in 

the step S533 up to this communication) as confirmed, regardless of whether the terminal 
device is used for communication (S537). It is thereby possible to prevent an illegal 
action of evading the duty of payment on the pretence that the terminal device has been 
lost. Since it is rare case that the terminal device main body portion 651 and the battery 
15 charger 653 are lost together, the confirmation is made with sufficiently high accuracy. 

Further, if the authentication is not performed on the basis of the judgment in the 
step S533, the communication common carrier equipment 655 records the identification 
code Cd and the memory code Co which are received in the step S532 into the customer 
database memory 658 separately from the identification code Cd and the memory code 
20 Co which have been registered. The recorded identification code Cd and memory code 
Co can be useful for specifying the unauthorized user. 

Back to the step S507 of Fig. 34, there may be another case where only the 
identification code Cd is registered, instead of both the identification code Cd and the 
memory code Co. In this case, only the identification code Cd has to be read out in any 
25 stage of the steps S501 to S506. Registering the memory code Co is achieved by 
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registering the memory code Co transmitted in the step S53 1 into the customer database 
memory 658 when the user first uses the terminal device on charge (S530). 

Furthermore, the memory 601 may be incorporated in some auxiliary portion, 
not limited to the battery charger 653, detachable from the main body portion. The 
5 constitution of Fig. 33 where the auxiliary portion is the battery charger 653, however, has 
an advantage of periodically combining the main body portion 651 and the auxiliary 
portion without requesting an extra labor of the user. 

[9. The Ninth Preferred Embodiment] 

10 In the ninth preferred embodiment, discussion will be made on a constitution 

where the codes are transmitted in the encrypted form between the main body portion and 
the auxiliary portion and between the main body portion and the communication common 
carrier equipment in the terminal device of the eighth preferred embodiment. 

Fig. 37 is a block diagram showing a constitution of a terminal device in 
1 5 accordance with the ninth preferred embodiment of the present invention. The terminal 
device is characteristically different from the terminal device of Fig. 33 in that the 
encryption circuit 631 and the key generation unit 633 are formed in a semiconductor 
device 672 of a main body portion 671 and the encryption circuit 631 and a key 
generation unit 676 are also formed in the battery charger 653. Accordingly, the decoder 
20 circuit 632 is formed in a communication common carrier equipment 675. The 
communication common carrier equipment 675, the terminal device main body portion 
671 and the battery charger 673 constitute a communication system 670. 

In the battery charger 673, the key generation unit 676 generates the key K2 for 
encryption and the encryption circuit 63 1 encrypts the memory code Co read out from the 
25 memory 601 on the basis of the key K2 and transmits the encrypted memory code to the 
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main body portion 671 as a memory code Co#. In the main body portion 671, the key 
generation unit 633 generates the key K1 for encryption and the encryption circuit 631 
encrypts the identification code Cd generated by the code generation unit 400 on the basis 
of the key K1 and transmits the encrypted identification code to the communication 
5 circuit 405a as an identification code Cd#. The encryption circuit 63 1 in the main body 
portion 671 also encrypts the memory code Co# transmitted from the battery charger 673 
on the basis of the key K1 and transmits the encrypted memory code to the 
communication circuit 405a as a memory code Co##. The memory code Co## is doubly 
encrypted on the basis of the two keys K1 and K2. 

10 The communication circuit 405a transmits the identification code Cd# and the 

memory code Co## which are encrypted to the communication common carrier 
equipment 675. The decoder circuit 632 of communication common carrier equipment 
675 decodes the identification code Cd# and the memory code Co## into the 
identification code Cd and the memory code Co# to be served for judgment in the 
15 judgment circuit 657. 

Thus, since the codes are transmitted in the encrypted form between the main 
body portion 671 and the battery charger 673 and between the main body portion 671 and 
the communication common carrier equipment 675 in the terminal device of Fig. 37, the 
barrier against leakage of these codes is advantageously high. 

20 In the main body portion 671, it is preferable that the key generation unit 633 

and the encryption circuit 63 1 are formed in the single semiconductor substrate CH50 (or 
CH70) together with the code generation unit 400. With this constitution, a still higher 
barrier against leakage of the key K1 and the identification code Cd is achieved. 
Similarly, in the battery charger 673, it is preferable that the key generation unit 676 and 
25 the encryption circuit 631 are formed in a single semiconductor substrate CH71 together 
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with the memory 654. With this constitution, a still higher barrier against leakage of the 
key K2 and the memory code Co is achieved. 

Fig. 38 is a flowchart of procedure for the use of the terminal device of Fig. 37. 
At first, the semiconductor device 672 as a part is manufactured (S701). After that, the 
5 semiconductor device 672 is supplied for a phone maker and the terminal device main 
body portion 671 is assembled by the phone maker (S702). In parallel to these steps, or 
before or after these steps, the memory 654 as a part is manufactured (S703), and the 
battery charger 673 is thereafter assembled by the phone maker (S704). 

When both the terminal device main body portion 671 and the battery charger 
1 0 673 are finished, the identification code Cd is recorded as the memory code Co into the 

memory 654 (S705) and a set of the terminal device main body portion 671 and the 
battery charger 673 are supplied for a communication common carrier holding the 
communication common carrier equipment 675 (S706). The identification code Cd, the 
memory code Co# and the key K1 are read out in any stage of the steps S701 to S706 and 
15 registered into the customer database memory 658 of the communication common carrier 
equipment 675 (S707). After that, the set of the terminal device main body portion 671 
and the battery charger 673 are supplied for a user (S708) and thereafter served for 
communication by the user (S709). 

Figs. 39 and 40 are flowcharts showing an internal procedure of the step S709 of 
20 Fig. 38. When the communication is started, if the terminal device is used not on charge, 
in other words, if the battery charger 673 is not attached to the main body portion 671 
(S720), the terminal device main body portion 671 transmits the identification code Cd# 
to the communication common carrier equipment 675 (S721). The communication 
common carrier equipment 675 accordingly receives the identification code Cd# at the 
25 communication circuit 656 (S722). 
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Subsequently, in the communication common carrier equipment 675, the decoder 
circuit 632 decodes the identification code Cd# into the identification code Cd, and then 
the judgment circuit 657 compares the identification code Cd with the registered 
identification code Cd and judges whether these codes coincide with each other or not to 
5 transmit the enable signal En representing the judgment result to the communication 
circuit 656 (S723). When the enable signal En indicates coincidence of the codes (S724), 
the communication common carrier equipment 675 performs an authentication that the 
user of the terminal device main body portion 671 is authorized and when the enable 
signal En indicates noncoincidence of the codes (S724), the communication common 
10 carrier equipment 675 does not perform the authentication. The communication 
common carrier equipment 675 permits the communication to continue the 
communication process (S725) when the authentication is performed, and does not permit 
the communication to stop the communication process (S726) when the authentication is 
not performed, for example. 

15 If the terminal device is used on charge, in other words, if the main body portion 

671 is used for communication while being connected to the battery charger 673 (S720, 
S730), the terminal device main body portion 671 transmits both the identification code 
Cd# and the memory code Co## to the communication common carrier equipment 675 
(S731). The communication common carrier equipment 675 accordingly receives the 
20 identification code Cd# and the memory code Co## through the communication circuit 
656 (S732). 

Subsequently, in the communication common carrier equipment 675, the decoder 
circuit 632 decodes the identification code Cd# into the identification code Cd and 
decodes the memory code Co## into the memory code Co#, and then the judgment circuit 
25 657 compares the identification code Cd with the registered identification code Cd to 
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judge whether these codes coincide with each other or not and at the same time, compares 
the memory code Co# with the registered memory code Co# to judge whether these codes 
coincide with each other or not. The judgment circuit 657 transmits the enable signal En 
representing the two judgment results to the communication circuit 656 (S733). 

5 When it is recognized on the basis of the enable signal En that both the judgment 

results indicate coincidence of the codes (S734), the communication common carrier 
equipment 675 performs an authentication that the user of the terminal device is 
authorized and when it is recognized that at least one of the judgment results indicates 
noncoincidence of the codes (S734), the communication common carrier equipment 675 
10 does not perform the authentication. The authentication made on the basis of the 
judgment in the step S733 is a high-level authentication, proving that the terminal device 
is used validly with higher accuracy than the authentication made on the basis of the 
judgment in the step S723. 

As an example, if the high-level authentication is performed on the basis of the 
15 judgment in the step S733, when the terminal device is used for communication (S735), 
the communication common carrier equipment 675 not only permits the communication 
to continue the communication process, but also records the communication charge for 
the communication therebefore (from the previous authentication based on the judgment 
in the step S733 up to this communication) as confirmed, regardless of whether the 
20 terminal device is used for communication (S737). Further, if the high-level 
authentication is not performed on the basis of the judgment in the step S733, the 
communication common carrier equipment 675 records the identification code Cd and the 
memory code Co which are received in the step S732 into the customer database memory 
658 separately from the identification code Cd and the memory code Co which have been 
25 registered. 
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Back to the step S707 of Fig. 38, there may be another case where only the 
identification code Cd and the key K1 are registered, instead of the identification code Cd, 
the memory code Co# and the key Kl. In this case, only the identification code Cd has 
to be read out in any stage of the steps S701 to S706. Registering the memory code Co# 
5 is achieved by registering the memory code Co# transmitted in the step S731 into the 
customer database memory 658 when the user first uses the terminal device on charge 
(S730). 

Thus, by using the terminal device of Fig. 37, like using the terminal device of 
Fig. 33, the communication common carrier equipment 675 can selectively use the two 
10 authentications of different levels depending on the importance. Moreover, since the 
identification code Cd and the memory code Co are transmitted in the encrypted form, the 
barrier against leakage of these codes is advantageously high. 

It is considered that there is a case where an exchange of the battery charger 673 
is needed as the battery charger 673 is lost or damaged. In such a case, if the memory 
1 5 code Co# which has been registered can be updated to a memory code Co# inherent in a 

new battery charger 673, this is convenient for an authorized user. To update the 
memory code Co#, it is only necessary to add the steps S741 and S742 to the procedure of 
Fig. 40, as shown in Fig. 41. In the procedure of Fig. 41, when the memory code Co# is 
not changed (S741), the procedure of the steps S731 to S738 are performed like in the 
20 procedure of Fig. 40, and when the memory code Co# is changed (S741), a change 
process of the memory code Co# which has been registered is performed (S742). 

Figs. 42 and 43 are flowcharts showing an internal procedure of the change 
process (S742) of Fig. 41. When the change process is started, the identification code 
Cd#, the memory code Co##, the terminal identification number and a request signal 
25 representing decision of changing the registered memory code Co# are transmitted from 
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the terminal device to the communication common carrier equipment 675 (S752). 
Accordingly, the communication common carrier equipment 675 receives these codes, the 
terminal identification number and the request signal at the communication circuit 656 
(S753). 

5 Subsequently, in the communication common carrier equipment 675, the decoder 

circuit 632 decodes the identification code Cd# into the identification code Cd and 
decodes the memory code Co## into the memory code Co#, and then the judgment circuit 
657 compares the identification code Cd with the registered identification code Cd and 
judges whether these codes coincide with each other or not and compares the memory 
10 code Co# with the registered memory code Co# and judges whether these codes coincide 
with each other or not, to transmit the enable signal En representing the two judgment 
results to the communication circuit 656 (S753). 

When it is recognized on the basis of the enable signal En that both the judgment 
results indicate coincidence of the codes (S754), the communication common carrier 
15 equipment 675 transmits notice of permission for changing the registered memory code 
Co# to the terminal device and further transmits a message prompting a change of the 
battery charger 673 to a new one with a new memory code Co# to be displayed on the 
terminal device. When, responding to this, a user of the terminal device changes the 
battery charger 673 with the memory code Co# to a new battery charger 673 with a new 
20 memory code Co# (for convenience of discussion, referred to as CoNew#) (S757), the 
identification code Cd# and the memory code CoNew## are transmitted from the terminal 
device to the communication common carrier equipment 675 (S758). Accordingly, the 
communication common carrier equipment 675 receives these identification code Cd# 
and the memory code CoNew## at the communication circuit 656 (S753). 

25 Subsequently, in the communication common carrier equipment 675, the decoder 
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circuit 632 decodes the identification code Cd# into the identification code Cd and 
decodes the memory code CoNew## into the memory code CoNew# (S760). After that, 
the communication common carrier equipment 675 updates the memory code Co# 
registered in the customer database memory 658 with the memory code CoNew #. 

5 When it is recognized on the basis of the enable signal En that at least one of the 

judgment results indicates noncoincidence of the codes (S754), the communication 
common carrier equipment 675 does not further perform the change process and transmits 
a message prompting a retry with the currently-used battery charger 673 to be displayed 
on the terminal device (S755). 

10 The same change process as the step S742 can be added to not only the 

procedure shown in Fig. 40 but also the procedure shown in Fig. 36 where no encryption 
is used. That allows the user to change the battery charger 653 of Fig. 33. 

Instead of using the OTPROM for the memory 654 in the battery charger 653 
and 673, a rewritable memory such as a flash ROM may be used. The above change 
15 process S742 is suitable also for the use of the battery charger 653 and 673 in which the 
memory code Co# can be rewritten. For higher security against the fraudulent change, it 
is also possible to limit the change process of the registered memory code Co# to a case 
where the terminal device transmits some information for assurance of charges such as a 
credit card number. 

20 Figs. 44 and 45 are flowcharts showing another internal flow of the 

communication process (S709) of Fig. 38. In the communication process (S770), the 
authentication is used for business transaction. Specifically, if the high-level 
authentication is performed on the basis of the judgment in the step S733, when the 
terminal device is used for communication (S735), the communication common carrier 
25 equipment 675 continues the communication process to permit the business transaction 
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(S774) and further records the business transaction in the communication therebefore 
(from the previous authentication based on the judgment in the step S733 up to this 
communication) as concluded, regardless of whether the terminal device is used for 
communication (S775). On the other hand, if the high-level authentication is not 
5 performed on the basis of the judgment in the step S733, the communication common 
carrier equipment 675 records the business transaction in the communication therebefore 
as not concluded (S776). 

With the record that the business transaction is concluded on the basis of the 
highly accurate authentication, a trading partner can perform various procedures, such as 
10 shipment of products, as the business transaction is valid on the basis of the record, and 
with the record that the business transaction is not concluded, the trading partner can stop 
the procedure for the business transaction. This makes it possible to resolve or reduce 
the loss through the illegal business transaction caused by the fraudulent use of the 
terminal device. 

15 More preferably, if the high-level authentication is not performed on the basis of 

the judgment in the step S733, the communication common carrier equipment 675 makes 
a recording so as not to permit the business transaction not on charge (S777). The 
recording is made, for example, by setting a flag in a register of a computer system of the 
communication common carrier equipment 675. 

20 If the terminal device is used not on charge, in other words, if the battery charger 

673 is not attached to the main body portion 671 (S720), when the authentication is 
performed on the basis of the judgment of the step S723, it is judged whether the 
recording not to permit the business transaction not on charge is made or not (e.g., 
whether the above flag is on or off) (S771). Then, if the above recording is not made, 
25 the communication common carrier equipment 675 continues the communication process 
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to permit the business transaction (S772) and if the recording is made, the communication 
common carrier equipment 675 stops the communication process (S773). 

Since the highly-accurate judgment result made in the past is reflected on the 
normal authentication performed when the battery charger 673 is not attached to the main 
5 body portion 671, it is possible to perform an important procedure such as business 
transaction under the normal authentication. Further, the steps S772 to S773 and S774 
to S777 shown in Figs. 44 and 45 can be performed in the step S509 shown in Figs. 35 
and 36. 

The battery charger 673 of Fig. 37 can be replaced with a portable IC card. In 
10 this case, a user sometimes needs to attach the IC card to the main body portion 671, but 
if the memory code Co# can be transmitted from the IC card to the main body portion 671 
by wireless, it is possible to save the user's labor of attaching the IC card to the main body 
portion 671 on purpose, for user's convenience. Fig. 46 is a block diagram showing 
another constitution of the terminal device to achieve the above radio communication. 

15 In the terminal device of Fig. 46, a communication interface 694 is provided in a 

semiconductor device 692 of a main body portion 691 and a communication interface 695 
is provided in an IC card 693. The communication interface 694 is formed in a single 
semiconductor substrate CH90 (or CH91) together with the key generation unit 633, the 
encryption circuit 631 and the code generation unit 400, for example. Similarly, the 
20 communication interface 695 is formed in a single semiconductor substrate CH92 
together with the key generation unit 676, the encryption circuit 63 1 and the memory 654, 
for example. 

The communication interfaces 694 and 695 are interfaces for radio 
communication in conformity with Bluetooth Standard for example. Therefore, the 
25 memory code Co# is transmitted from the IC card 693 to the main body portion 691 with 
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radio communication. For this reason, even when the IC card 693 is in a pocket of a 
user's jacket and the main body portion 691 is in a bag that the user carries, it is possible 
to transmit both the identification code Cd# and the memory code Co## to the 
communication common carrier equipment 675. Instead of the IC card 693, a card such 
5 as a UIM (Universal subscriber Identification Module) which is inserted in the main body 
portion as a cellular phone when it is used may be used. In this case, however, since a 
possibility of losing both the main body portion and the card at the same time should be 
considered, it is more preferable that the memory code Co# should be transmitted 
between the main body portion and a separately independent appliance as shown in Fig. 
10 46. 

Further, in the communication system 670, the communication common carrier 
equipment 675 may be replaced with an ATM system of a bank and other communication 
common carrier equipments, as shown in Fig. 12. For example, when a business 
transaction on the basis of the authentication is made, the ATM system of the bank which 
15 is a trading partner of the terminal device can directly perform procedures such as 
authentication, permission of business transaction and non-permission. The same 
applies to the communication system of other preferred embodiments. 

[10. The Tenth Preferred Embodiment] 

20 There has been a problem that the terminal device can not perform radio 

communication through the communication common carrier equipment in a region where 
radio wave has difficulty in entering, e.g., in an underground shopping area and a building. 
Or, to enable the radio communication in such a region, it is necessary to establish a lot of 
base stations. In the tenth preferred embodiment, discussion will be made on a terminal 
25 device and a communication method which enable the radio communication without any 
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base station even in the region where the radio communication through the 
communication common carrier equipment can not be performed. In the terminal device 
of the communication method of this preferred embodiment, the encryption circuit, the 
decoder circuit and the key generation unit described in the fifth preferred embodiment 
5 are useful. 

[10.1. Outline] 

Fig. 47 is an explanatory diagram of a communication method in accordance 
with the tenth preferred embodiment of the present invention. In this method, a terminal 
10 device is used which is capable of forming both a radio communication through a 
communication common carrier equipment and a radio communication network without 
the communication common carrier equipment. In an example discussed below, a 
wireless LAN is used as the radio communication network. Even in the region where 
radio wave has difficulty in entering, people in crowds ordinarily assemble or pass by. 
15 Today, most of such people carry cellular phones. If the cellular phones that the people 
carry are terminal devices having the above function, as shown in Fig. 47, the wireless 
LAN is formed among a plurality of terminal devices 840a to 840d, to enable mutual 
communication. For example, the terminal devices 840a and the 840d use the terminal 
devices 840b and 840c as relays, to enable mutual communication. 

20 As the wireless LAN, one in conformity with Bluetooth Standard may be used 

for example. In this case, one terminal device can perform communication by wireless 
with one other terminal device within a range of ten-meter radius around itself. In an 
underground shopping area or a building, a lot of passengers, workers and the like 
ordinarily exist within a range of a ten-meter radius, and through the terminal devices that 
25 the people carry, communication entirely covering the underground shopping area or the 
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building can be achieved. 

Using the wireless LAN advantageously makes the operation possible with small 
power. For example, the power consumption of the wireless LAN covering the range of 
a ten-meter radius, which is needed to throw the radio wave, is (1/1 00) 2 of that of the 
5 radio communication covering the range of a one-kilometer radius. If one thousand 
terminal devices which are aligned at one-meter intervals on the average relay the 
communication in order to establish communication between the terminal devices which 
located one-kilometer apart, the whole power consumption is reduced to (l/100) 2x 1000 = 
1/10 of that of the above radio communication. 

10 Further, not only in the region where the radio wave has difficulty in entering, 

such as an underground shopping area or a building, but also in a space where people in 
crowds generally assemble, pass by or live, the communication through other terminal 
devices can be achieved by forming the wireless LAN. Even when the space includes 
the region where the radio wave has difficulty in entering, such as an underground 
15 shopping area or a building, the communication through other terminal devices is not 
blocked. Furthermore, when the terminal devices in houses use the wireless LAN as a 
relay, architecture of a radio communication system with low power consumption which 
needs almost no base station can be achieved in residential blocks on the ground. 

20 [10.2. Example of Terminal Device] 

In the communication through the wireless LAN shown in Fig. 47, it is necessary 
to ensure the security against leakage of communication content since the communication 
is performed through the terminal devices that an unspecified number of persons carry. 
To ensure the security, a terminal device 840 has only to have a constitution in which a 
25 portion for radio communication through a communication common carrier equipment 
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(temporarily referred to as a long-distance communication unit) 847 and a portion for 
communication through the wireless LAN (temporarily referred to as a short-distance 
communication unit) 848 are electrically separated, as shown in Fig. 48. 

The long-distance communication unit 847 comprises a communication circuit 
5 841 for performing radio communication through the communication common carrier 

equipment, a microphone 842 for inputting a voice, a speaker 843 for outputting the voice, 
an input unit 845 for inputting dial numbers and the like through key operation and the 
like and a display panel 844 for displaying information with characters, signs, graphics 
and the like. The short-distance communication unit 848 comprises a wireless LAN 
10 circuit 846 for forming a wireless LAN to perform radio communication. Since the 
long-distance communication unit 847 and the short-distance communication unit 848 are 
separated from each other in a terminal device 840 of Fig. 48, a user carrying the terminal 
device 840 can not perform the communication through the wireless LAN, but only relays 
other's communication. 

15 To enable the user carrying the terminal device to perform the communication 

through the wireless LAN and ensure security against leakage of communication content, 
an encryption technique can be used as shown in Fig. 49. Even when the radio 
communication through the communication common carrier equipment uses an 
encryption technique, the radio communication through the wireless LAN uses its own 
20 encryption technique different therefrom. 

Between the wireless LAN circuit 846 and the communication circuit 841, a 
transmission path of the communication signal is provided and a selector circuit 856, an 
encryption circuit 851 and a decoder circuit 852 are inserted in this transmission path. 
The selector circuit 856 selectively connect and disconnect the above transmission path. 
25 When the selector circuit 856 connects the above transmission path, the communication 
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through the wireless LAN is established between the user of a terminal device 850 and 
one other person. When the selector circuit 856 disconnects the above transmission path, 
the terminal device 850 only relays other persons' communication through the wireless 
LAN. Further, though antennas are separated into one for transmission and the other for 
5 reception in Fig. 49, for convenience of illustration, a single antenna is usually shared. 

The encryption circuit 851, the decoder circuit 852 and the key generation unit 
853 perform their own functions to establish communication through the wireless LAN 
between the user of the terminal device 850 and one other person when the selector circuit 
856 connects the above transmission path. The key generation unit 853 generates the 
10 key K for encryption. The encryption circuit 851 encrypts a transmitting signal 
transmitted from the communication circuit 841 to a transmitter circuit 855 of the wireless 
LAN circuit 846 on the basis of the key K. The decoder circuit 852 decodes a receiving 
signal transmitted from a receiver circuit 854 of the wireless LAN circuit 846 to the 
communication circuit 841 on the basis of the key K. 

15 In this case, the key K has to be a key shared with the partner of the 

communication that the terminal device performs through the wireless LAN. For this 
reason, the key generation unit 853 has an internal constitution shown in Fig. 50. 
Specifically, the key generation unit 853 comprises the code generation unit 633 and a 
key calculation unit 857. The code generation unit 633 generates an identification code 
20 inherent in the terminal device 850. The key calculation unit 857 calculates a shared key 
which is shared between the user of the terminal device 850 and the communication 
partner on the basis of another code transmitted from the communication partner through 
the wireless LAN circuit 846 and outputs the shared key as the key K. 

It is desirable that the code generation unit 633 should have the constitution of 
25 Fig. 25 or 26 in the fifth preferred embodiment. This produces the same effect as that of 
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the fifth preferred embodiment. Fig. 50 illustrates an example where the code 
generation unit 633 has the constitution of Fig. 26. 

[10.3. Procedure of Key Generation] 

5 Fig. 51 is a flowchart showing an exemplary procedure for generating the key K 

by the key generation unit 853. The procedure of Fig. 51 uses the well-known DH 
method. When the communication through the wireless LAN is started between the 
terminal device 850 and one other terminal device, it is judged whether the other terminal 
device, i.e., the communication partner is a first-time partner or not (S801). When the 
10 communication partner is first-time one, a code a# = g a mod(p) is calculated by the key 
generation unit 857 on the basis of a predetermined prime number p and a predetermined 
natural number g (S802). In this case, a represents the identification code Cd generated 
by the code generation unit 633, mod() represents a mode in theory of numbers, and the 
prime number p and the natural number g are common among all the terminal devices, 
15 which correspond to public keys. 

Subsequently, the calculated code a # is transmitted through the communication 
circuit 841 and the transmitter circuit 855 to the communication partner (S803). Then, a 
code 0 # = g i3 mod(p) is received by the receiver circuit 854 and transmitted through the 
communication circuit 841 to the key calculation unit 857 (S804). The key calculation 

20 unit 857 calculates the key K = g ap mod(p) (S805). After that, the key calculation unit 

857 records the calculated key K into a memory 858 together with an identification 
number (e.g., telephone number) of the communication partner (S806). 

Next, the key calculation unit 857 supplies the encryption circuit 851 and the 
decoder circuit 852 with the key K to establish a cipher communication with the key K 
25 used as a shared key (S808). The process of the step S808 continues until the 
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communication is ended (S809). In the step S801, when it is judged that the 
communication partner is not first-time one, the key calculation unit 857 does not 
calculate the key K but reads out the key K from the memory 858 (S807), and then the 
processes of the steps S808 and S809 are performed. The judgment in the step S801 can 
5 be made on the basis of whether the record is found in the memory 858 or not. 

Thus, since the cipher communication is performed on the basis of the shared 
key generated by exchanging the identification codes with the communication partner, the 
communication can be established with any communication partner while preventing 
leakage of communication content. Further, in the procedure of Fig. 51, there may be 
10 another example where the steps S801 and S807 are omitted and the key K is calculated 
every time when the communication is performed. 

[10.4. Another Example of Terminal Device] 

Fig. 52 is a block diagram showing another constitution of the terminal device in 
15 accordance with the tenth preferred embodiment of the present invention. In this 
terminal device 860, a receiving signal received by a communication circuit 861 is 
amplified by a low noise amplifier 862 and demodulated by a mixer 863 coupled to a 
VCO (voltage controlled oscillator) 864 and then processed by a baseband circuit 878. 
Further, a transmitting signal processed by the baseband circuit 878 is modulated by a 
20 mixer 865 coupled to a VCO 866 and amplified by a power amplifier 867, and then 
transmitted to the communication common carrier equipment. 

On the other hand, a receiving signal received by a wireless LAN 871 is 
amplified by a low noise amplifier 872 and demodulated by a mixer 873 coupled to a 
VCO 874, going through a selector circuit 870, and then modulated by a mixer 868 
25 coupled to a VCO 869, The modulated receiving signal goes through the mixer 863 in 
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the communication circuit 861 and then inputted to the baseband circuit 878. The 
receiving signal of the wireless LAN which is inputted to the baseband circuit 878 is 
demodulated by the decoder circuit 852. A transmitting signal of the wireless LAN goes 
through the baseband circuit 878, the encryption circuit 851 and the selector circuit 870 
5 and then inputted to a baseband circuit 879. After that, the transmitting signal is 
modulated by a mixer 875 coupled to a VCO 766 and amplified by a power amplifier 877, 
and then transmitted. 

Thus, in the terminal device 860 of Fig. 52, the receiving signal inputted to the 
wireless LAN circuit 871 is demodulated, and thereafter modulated and inputted to the 
10 communication circuit 861. As shown in Fig. 53, the mixer 853 modulates the 
demodulated receiving signal of the wireless LAN with a carrier wave having a frequency 
f within a specified range (represented as "special band" in Fig. 53) in a communication 
circuit band. Therefore, in whichever range of a wireless LAN band the frequency f of 
the receiving signal of the wireless LAN exist, a modulated wave whose frequency f 
15 exists within the special band is inputted to the communication circuit 861 . 

Supposing the receiving signal of the wireless LAN is not demodulated but 
inputted to the communication circuit 861 only with its frequency converted, it becomes 
necessary to ensure a wider communication circuit band as shown in Fig.54. In contrast 
to this, in the terminal device 860 of Fig. 52, it is not necessary to ensure a wide 
20 communication circuit band and therefore the utilization ratio of the frequency band of 
the communication circuit 861 can be advantageously improved. 

In the terminal device where the communication circuit and the wireless LAN 
circuit are selectively combined as illustrated in Fig. 49 or 52, it becomes possible to 
combine the communication path through the communication common carrier equipment 
25 and the wireless LAN as shown in Fig. 55. Specifically, through the communication 
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circuit in the long-distance communication unit 847 of the terminal device 850c which is 
one of a plurality of terminal devices 850a to 850c forming a wireless LAN, another 
terminal device 850a can perform communication through the communication common 
carrier equipment. Thus, it is also possible for a terminal device in an underground 
5 shopping area where radio wave has difficulty in entering to perform communication 
through the communication common carrier equipment. To reduce the load of the 
terminal device combining the communication path through the communication common 
carrier equipment and the wireless LAN (the terminal device 850c in the example of Fig. 
55), such a communication should be permitted only for emergency communication. 

10 Further, it is possible to limit all the communication through the wireless LAN to 

an emergency communication. This reduces the load of the terminal devices which relay 
the communication through the wireless LAN (the terminal devices 840b and 840c in the 
example of Fig. 47). Since the importance of security against leakage of communication 
content is low in the emergency communication, it is possible to remove the circuits for 
1 5 encryption. The emergency communication refers to communication for requesting aid, 

for example, at the time when an emergency which endangers life and property occurs. 

[11. The Eleventh Preferred Embodiment] 

Even in the region where, it is supposed, people in crowds ordinarily concentrate, 
20 such as an underground shopping area and building, the population density becomes low 
depending time, e.g., at night. In the eleventh preferred embodiment, discussion will be 
made on a method for enabling the communication through the wireless LAN even when 
the population density in the crowds is low. 

Fig. 56 is an explanatory diagram of a communication method in accordance 
25 with the eleventh preferred embodiment of the present invention. In this communication 
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method, terminal devices 1050a and 1050b for enabling formation of the wireless LAN 
are installed in the region where radio wave has difficulty in entering, such as an 
underground shopping area. The terminal devices 1050a and 1050b are preferably 
public telephones, and installed, e.g., near entrances of shops in the underground 
5 shopping area. In this case, the terminal devices 1 050a and 1 050b each comprise a long- 
distance communication unit 1057 for performing an original function of the public 
telephone as well as the short-distance communication unit 848. Even when the 
population density of the crowd is low, the terminal devices 850a and 850b can use the 
short-distance communication units 848 of the terminal devices 1050a and 1050b as 
1 0 relays to establish the communication through the wireless LAN. 

[12. The Twelfth Preferred Embodiment] 

In the twelfth preferred embodiment, discussion will be made on more desirable 
examples of the semiconductor element 401, the coding circuit 402 and the comparator 
1 5 circuit 403 discussed in the above preferred embodiments. 

[12.1 . Example of Semiconductor Device] 

Fig. 57 is a circuit diagram showing a preferable example of the semiconductor 
element 40 1 . This semiconductor element 40 1 a comprises a plurality of TFTs 101 (4X4 
20 =16 TFTs 101 in the example of Fig. 57) arranged in matrix on a semiconductor substrate. 

On the semiconductor substrate, a plurality of word lines WL1 to WL4 and a plurality of 
bit lines BL1 to BL4 are further arranged in horizontal and vertical directions, 
respectively. 

Respective gate electrodes of four TFTs 101 which are horizontally arranged are 
25 connected in common to each of the word lines WL1 to WL4. On the other hand. 
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respective drain electrodes of four TFTs 101 which are vertically arranged are connected 
in common to each of the bit lines BL1 to BL4. Respective source electrodes of sixteen 
TFTs 101 are connected in common to a positive power supply line. Further, one end of 
each of the bit lines BL1 to BL4 is connected to a ground power supply line through a bit- 
5 line load 1 7. 

A wire 1 8 for taking out the analog signal An is connected to one end of the bit- 
line load 1 7 opposite to the ground line. Further, a pad 1 5 is connected to the other end 
of each of the bit lines BL1 to BL4, and a pad 16 is connected to one end of each of the 
word lines WL1 to WL4. 

10 Since the semiconductor element 401a has the above constitution, when a gate 

voltage of predetermined level is applied to one of the word lines WL1 to WL4, drain 
currents Idl to Id4 flow in the four TFTs 101 connected to the word line, respectively. 
Since the drain currents Idl to Id4 flow in the bit-line loads 17, potentials in proportion to 
the drain currents Idl to Id4 are developed at the wires 18 connected to the bit lines BL1 
1 5 to BL4. The four potentials are outputted to the outside as the analog signals An. By 
sequentially applying the gate voltage to the word lines WL1 to WL4, sixteen potentials 
in total can be taken out as the analog signals AN. 

The sixteen analog signals An are coded by the coding circuit 402, being 
converted into a 16-bit digital signal, e.g., as shown in Fig. 58. In Fig. 58, the 16-bit 
20 code is arranged in matrix so that the relation between the TFTs 1 0 1 on which the code is 
based and the bit lines BL1 to BL4 and the word lines WL1 to WL4 which are connected 
thereto can be understood. 

[12.2. Example of Coding Circuit and Comparator Circuit] 

25 Fig. 59 is a block diagram showing a preferable constitution of a semiconductor 
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device using the semiconductor substrate CHS (or CHI) of Fig. 1. This semiconductor 
device 404a comprises the semiconductor element 401a shown in Fig. 57. The 
semiconductor device 404a comprises a decoder driver 410 for driving any one of the 
plurality of word lines WL1 to WL4 in the semiconductor element 401a on the basis of an 
5 address signal Adr. The address signal Adr can be inputted from the outside through 
input terminals. 

A code Cd outputted by the coding circuit 402 is not only inputted to the 
comparator circuit 403 but also outputted to the outside through a buffer circuit 411. 
This allows limited persons to know the identification code Cd in advance. Since the 
1 0 buffer circuit 4 1 1 is provided, it is possible to prevent a fraud of inputting a code different 

from the identification code Cd outputted from the coding circuit 402 from the outside 
through output terminals for the identification code Cd to the comparator circuit 403. 

Since the semiconductor element 401a comprises the pads 15 and 16, it is 
possible to directly read out the analog signals An by applying a probe to the pads 15 and 
15 1 6 in the manufacturing process of the semiconductor device 404a. The read-out analog 

signal An can be converted into the identification code Cd by using a device having the 
same characteristic feature as the coding circuit 402, and the identification code Cd can 
also be thereby obtained. Therefore, when the identification code Cd does not need to 
be read out in a place other than a manufacturing plant for the semiconductor device 404a, 
20 the input terminal for the address signal Adr, the output terminals for the identification 
code Cd and the buffer circuit 41 1 may be removed. 

The comparator circuit 403 inputs the address signal Adr to the decoder driver 
410 when it compares the memory code Co inputted through input terminals with the 
identification code Cd. Since the semiconductor device 404a is thereby driven to read 
25 out the analog signal An, it is possible to compare the identification code Cd with the 
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memory code Co without inputting the address signal Adr from the outside. 

Fig. 60 is a circuit diagram of a preferable example of the coding circuit 402, 
showing a circuit portion connected to the bit line BL1 as a representative. The same 
circuit portion as shown in Fig. 60 are also connected to the other bit lines BL2 to BL4. 

5 The coding circuit 402a comprises a sense amplifier 190. The sense amplifier 190 
compares the potential at the wire 18 with a reference potential Vref generated by 
transistors 192 and 193 to generate a signal of high level or low level and outputs the 
signal as one bit of the identification code Cd (e.g., an identification code Cd(l) 
corresponding to the bit line BL1) . 

10 In the sense amplifier 190, a series circuit consisting of an NMOS transistor 194 

and a PMOS transistor 195 and a series circuit consisting of an NMOS transistor 196 and 
a PMOS transistor 197 are interposed between the positive power supply line and the 
ground power supply line. A gate electrode and a drain electrode of the PMOS 
transistor 1 95 and a gate electrode of the PMOS transistor 1 97 are connected to each other, 
1 5 to constitute a current mirror circuit. 

The drain current flowing in the TFT 101 has a low value within a range from 
about 1 pA ( 1 0' 2 A) to about 1 p. A. Therefore, it is desirable to set the drain current to 
about 1 nA (10' 9 A) by using an NMOS transistor as the bit-line load 17 and applying a 
constant potential to its gate electrode. That enhances the sensitivity of the sense 
20 amplifier 1 90. It is desirable to set a gate potential to the ground potential in order to set 
the drain current to about 1 nA. 

A series circuit consisting of the NMOS transistor 1 92 and the PMOS transistor 
193 is interposed between the ground power supply line and the positive power supply 
line and the reference potential Vref is taken out from nodes of the two transistors. 
25 Constant potentials, such as the potential of the ground power supply line and the 
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potential of the positive power supply line, are supplied to gate electrodes of the NMOS 
transistor 192 and the PMOS transistor 193, respectively. Comparison of the potential of 
the wire 18 with the reference potential Vref is equivalent to comparison of the drain 
current of the TFT 101 with a reference current Ir (or its constant-numberfold) flowing in 
5 the series circuit of the NMOS transistor 192 and the PMOS transistor 193. 

For secure comparison, it is desirable that the transistors other than the TFT 101 
of Fig. 60 should be bulk-type transistors. If the transistors other than the TFT 101 are 
polycrystalline TFTs like the TFT 101, it is desirable that the gate length and the gate 
width of the transistors should be set larger than those of the TFT 101 in order to secure 
1 0 the stability of the magnitude of the drain current therein. 

[12.3. Another Example of Semiconductor Device] 

The semiconductor element 401 may comprise a polycrystalline resistive 
element or a polycrystalline capacitive element, for example, instead of the 
1 5 polycrystalline TFT 101. Such an example will be discussed below. 

Fig. 61 is a circuit diagram showing another example of the semiconductor 
element 401 comprising the polycrystalline resistive element. This semiconductor 
element 401b comprises a plurality of resistive elements 43 (4 X4 = 16 resistive elements 
43 in the example of Fig. 61) arranged in matrix on a semiconductor substrate. The 
20 resistive element 43 has a resistive substance made of polycrystalline semiconductor such 
as polycrystalline silicon. Therefore, the resistance value randomly varies in the 
resistive element 43. 

On the semiconductor substrate, a plurality of word lines WL1 to WL4 and a 
plurality of bit lines BL1 to BL4 are further arranged horizontal and vertical directions, 
25 respectively. 
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Respective one ends of four resistive elements 43 which are horizontally 
arranged are connected in common to each of the word lines WL1 to WL4. On the other 
hand, respective other ends of four resistive elements 43 which are vertically arranged are 
connected in common to each of the bit lines BL1 to BL4. Further, one end of each of 
5 the bit lines BL1 to BL4 is connected to the ground power supply line through an NMOS 

transistor 48 as a bit-line load. 

A wire 49 for taking out the analog signal An is connected to a drain electrode of 
the NMOS transistor 48. Further, the pad 1 5 is connected to the other end of each of the 
bit lines BL1 to BL4, and the pad 16 is connected to one end of each of the word lines 
10 WL1 to WL4. 

Since the semiconductor element 401b has the above constitution, when a gate 
voltage of predetermined level is applied to one of the word lines WL1 to WL4, currents 
flow in the four resistive elements 43 connected to the word line. Since the currents 
flow in the NMOS transistor 48, potentials in proportion to the currents flowing the 
15 resistive elements 43 are developed at the wires 49 connected to the bit lines BL1 to BL4. 

The four potentials are outputted to the outside as the analog signals An. By 
sequentially applying the predetermined potentials to the word lines WL1 to WL4, sixteen 
potentials in total can be taken out as the analog signals AN. The analog signals An can 
be obtained as random values corresponding to varied resistances of the resistive elements 
20 43. 

Since the semiconductor element 401b comprises the pads 15 and 16, it is 
possible to read out the analog signals An by using the probe in the manufacturing 
process of the semiconductor element 401b. Further, there may be another case where 
the resistive elements 43 are arranged in linear matrix and one ends of all the resistive 
25 elements 43 are connected to a single word line. To increase the variation of the analog 
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signals An, the length and the width of the polycrystalline substance of the resistive 
element 43 are preferably set to the same range as the optimum condition for the gate 
length L and the gate width W. 

5 [12.4. Still Another Example of Semiconductor Device] 

Fig. 62 is a circuit diagram showing still another example of the semiconductor 
element 401 having a capacitive element of polycrystalline substance. This 
semiconductor element 401c comprises series circuits consisting of a plurality of 
capacitive elements 91 (4x4 = 16 capacitive elements 91 in the example of Fig. 62) and 
10 MOS transistors 90 arranged in matrix on a semiconductor substrate. The capacitive 
element 91 comprises a polycrystalline dielectric substance, e.g., a perovskite 
polycrystalline dielectric substance such as BST (Ba x Sr,. x Ti0 3 ). Therefore, the 
capacitance value randomly varies in the capacitive element 91. 

On the semiconductor substrate, a plurality of word lines WL1 to WL4 and a 
15 plurality of bit lines BL1 to BL4 are further arranged horizontal and vertical directions, 
respectively. Respective gate electrodes of the MOS transistors 90 included in the four 
series circuits which are horizontally arranged are connected in common to each of the 
word lines WL1 to WL4. On the other hand, respective one of source electrodes and 
drain electrodes of the MOS transistors 90 included in the four series circuits which are 
20 vertically arranged are connected in common to each of the bit lines BL1 to BL4. 
Respective one ends of the capacitive elements 91 included in the sixteen series circuits 
are connected to the ground power supply line. The pad 1 5 is connected to the other end 
of each of the bit lines BL1 to BL4, and the pad 16 is connected to one end of each of the 
word lines WL1 to WL4. 

25 Since the semiconductor element 401c has the above constitution, when a gate 
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voltage of predetermined level is applied to one of the word lines WL1 to WL4, the four 
MOS transistors connected to the word line can be turned on. Through the MOS 
transistors which are turned on, the other ends of the four capacitive elements 91 are 
electrically connected to the bit lines BL1 to BL4. At this time, through the bit lines 
5 BL1 to BL4, it is possible to measure the capacitances of the four capacitive elements 91. 
For example, the potential at the time when a current is supplied for a given time period 
can be measured and this potential can be taken out as the analog signal An. The 
potential reflects the capacitance of the capacitive element 91. 

By sequentially applying the predetermined gate voltages to the word lines WL1 
10 to WL4, sixteen potentials in total can be taken out as the analog signals An. The analog 
signals An can be obtained as random values corresponding to varied capacitances of the 
capacitive elements 91. Since the semiconductor element 401c comprises the pads 15 
and 16, it is possible to read out the analog signals An by using a probe in the 
manufacturing process of the semiconductor element 401c. Further, there may be 
15 another case where the series circuits each consisting of the capacitive element 91 and the 
MOS transistor 90 are arranged in linear matrix and gate electrodes of all the MOS 
transistors 90 are connected to a single word line. 

To increase the variation of the analog signals An, the length and the width of the 
polycrystalline dielectric substance of the capacitive element 91 are preferably set to the 
20 same range as the optimum condition for the gate length L and the gate width W. In the 
BST, when the film thickness is 100 nm, the film thickness in terms of silicon oxide film 
is about 0.5 nm. Therefore, if the shape of the BST facing the electrode is a square with 
sides of 0.3pm, the capacitance is about 6.2 fF. In an optimal case where the diameter of 
grain (average value) is set to 100 nm which corresponds to the film thickness, the 
capacitance varies in a range from -30 % to +30 %, i.e., a range from 4.3 fF to 8.1 fF. 
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The range is a variation sufficiently large enough to be used as identification. 

[12.5. Another Example of Comparator Circuit] 

Fig. 63 is a block diagram showing another preferable constitution of the 
5 semiconductor device using the semiconductor substrate CH3 (or CHI). This 
semiconductor device 404d comprises a comparator circuit 403a which can judge not 
only complete coincidence between the identification code Cd and the memory code Co 
but also approximation within a predetermined range. A reference value SL used for 
judgment can be inputted from the outside of the semiconductor element 404d through an 
1 0 input terminal. 

To enable this, the comparator circuit 403a comprises a sweep circuit 200 for 
sweeping the potential of a word line WL. The identification code Cd which is varied 
by sweeping the potential of the word line WL is compared by an approximation 
calculation circuit 199 with corresponding some of the memory codes Co stored in an 
15 input code memory 198. The approximation calculation circuit 199 transmits a degree 
of approximation VA between the codes calculated through the comparison to an 
evaluation circuit 210. The evaluation circuit 210 compares the degree of approximation 
VA with the reference value SL to judge whether the degree of approximation VA is not 
less than a given value or not and outputs the judgment result as a judgment signal VB. 

20 The judgment signal VB is obtained for each word line WL which the decoder 

driver 410 drives. An address generation circuit 441 transmits the address signal 
sequentially specifying all the word lines WL one by one to the decoder driver 410. 
Through this operation, a plurality of judgment signals VB corresponding to all the word 
lines WL are sequentially obtained one by one. 

25 An overall judgment circuit 220 judges the approximation between the code Cd 
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of all bits corresponding to all the word lines WL and the code Co of all bits on the basis 
of a plurality of judgment signals VB corresponding to all the word lines WL and outputs 
the enable signal En representing the judgment result. It is also possible to select 
judgment of complete coincidence which is the most strict judgment on approximation by 
5 properly setting the reference value SL. If there is one word line, the overall judgment 
circuit 220 is not needed and the judgment signal VB is outputted as the enable signal En. 

In response to an instruction signal St inputted through the input terminal, a 
control circuit 442 starts the operations of elements in the comparator circuit 403a and 
controls the operations of the elements in accordance with a predetermined procedure. 

10 In particular, a sweep switch signal SS which is a control signal instructing whether 
sweeping should be performed or not is transmitted from the control circuit 442 to the 
sweep circuit 200. The approximation calculation circuit 199, the evaluation circuit 210 
and the overall judgment circuit 220 constitute a judgment circuit 440. 

Incorporation by Reference 

1 5 The entire contents of all of the two documents referred to as documents 1 and 3 

are incorporated herein by reference. Further, US patent application no. 09/457,721 is 
also incorporated herein by reference. 

And furthermore, the entire contents of all of the following six 
documents(document 4 to 9) are incorporated herein by reference. 

20 Document 4: Journal of Applied Physics, Vol. 76, No. 12, 15 December 1994, pp. 8160 to 
8166 

Document 5: Japanese Patent application No. 5-111790 (1993) (Japanese Patent 
Laying-Open Gazette No. 6-326315 (1994) 

Document 6: Japanese Patent Application No. 7-101179 (1995) (Japanese Patent 

25 Laying-Open Gazette No. 8-29361 1 (1996) 
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Document 7: "Spectrum Kakusan Tsushin Gijutsu: Saishin Oyo Report-Shu" supervised 
by Yasuo Kadokawa, issued by Nihon Gijutsu Keizai Center on January 30, 1987, pp. 3 to 
24 

Document 8: Japanese Patent Application No. 6-120224 (1994) (Japanese Patent 
5 Laying-Open Gazette No. 7-99207 (1995) 

Document 9: Japanese Patent Publication Gazette No. 61-1900 (1986) 

While the invention has been shown and described in detail, the foregoing 
description is in all aspects illustrative and not restrictive. It is therefore understood that 
10 numerous modifications and variations can be devised without departing from the scope 



of the invention. 




